Zentrale und automatisierte Bereitstellung aller Windows Logfiles

'--------------------------------------------------Settings-------------------------------------------------  
'Gibt die Maximale Anzahl der zurückgelieferten Einträge an  
'Werte für System Log  
maxwert = 50
'Werte für Application Log  
maxwert2 = 25
'gibt an wieviele Tage zurück gegangen werden soll  
zeitsp = 7
'Email Settings  
absender = "absender@domain.de"  
mailserver = "mailserver.domain.de"  
empfanger = "empfanger@domain.de"  
'--------------------------------------------Settings End---------------------------------------------------  

Set oArg = wscript.arguments
strServer = oArg(0)
mail = ""  
mail2 = ""  
ifertig = "False"  
i2fertig = "False"  
if isOnline(strServer) Then
Set objWMI = GetObject("winmgmts://" & strServer & "/root\cimv2")  
Set objInstances = objWMI.ExecQuery ("Select * from Win32_NTLogEvent WHERE Logfile = 'System' and EventType = 1")  
Set objInstances2 = objWMI.ExecQuery ("Select * from Win32_NTLogEvent WHERE Logfile = 'Application' and EventType = 1")  
dim f
Else 
wscript.quit
End if

    mail = "<h1>System Events:</h1><br><TABLE Border=1>" & chr(13)  
    mail = mail & "<Tr>" & chr(13)  
    mail = mail &   "<TD>ComputerName</TD>"& chr(13)  
    mail = mail &  "<TD>EventCode</TD>"& chr(13)  
    mail = mail &   "<TD>Message</TD>"& chr(13)  
    mail = mail &   "<TD>SourceName </TD>"& chr(13)  
    mail = mail &  "<TD>TimeGenerated </TD>"& chr(13)  
    mail = mail &   "</TR>"& chr(13)  
        
    mail2 = "<br><h1>Application Events:</h1><br><TABLE border=1>" & chr(13)  
    mail2 = mail2 & "<Tr>" & chr(13)  
    mail2 = mail2 &   "<TD>ComputerName</TD>"& chr(13)  
    mail2 = mail2 &  "<TD>EventCode</TD>"& chr(13)  
    mail2 = mail2 &   "<TD>Message</TD>"& chr(13)  
    mail2 = mail2 &   "<TD>SourceName</TD>"& chr(13)  
    mail2 = mail2 &  "<TD>TimeGenerated </TD>"& chr(13)  
    mail2 = mail2 &   "</TR>"& chr(13)  

dat = now() - zeitsp
i = 0
i2 = 0

For Each objInstance in objInstances
        dat1 = objInstance.TimeGenerated
        dat1 = dConvertWMItoVBSDate(dat1)
                if i < maxwert and dat1 > dat Then
                        With objInstance            
                        mail = mail &   "<Tr>"& chr(13)  
                        mail = mail &   "<TD>" & .ComputerName & "</TD>"& chr(13)  
                        mail = mail &   "<TD>" & .EventCode & "</TD>"& chr(13)  
                        mail = mail &  "<TD>" & .Message & "</TD>"& chr(13)  
                        mail = mail &   "<TD>" & .SourceName & "</TD>"& chr(13)  
                        mail = mail &   "<TD>" & dConvertWMItoVBSDate(.TimeGenerated) & "</TD>"& chr(13)  
                        mail = mail &   "</TR>"& chr(13)  
                        i = i +1
                        End With
                        On Error Goto 0
                Elseif i > maxwert Then
                        ifertig="True"  
                        exit for
                Elseif dat1 < dat Then
                        ifertig="True"  
                        exit for
                end if
Next

For Each objInstance in objInstances2
  dat1 = objInstance.TimeGenerated
        dat1 = dConvertWMItoVBSDate(dat1)
if i2< maxwert2 and dat1 > dat Then
                    With objInstance           
                        mail2 = mail2 &   "<Tr>"& chr(13)  
                        mail2 = mail2 &   "<TD>" & .ComputerName & "</TD>"& chr(13)  
                        mail2 = mail2 &   "<TD>" & .EventCode & "</TD>"& chr(13)  
                        mail2 = mail2 &   "<TD>" & .Message & "</TD>"& chr(13)  
                        mail2 = mail2 &   "<TD>" & .SourceName & "</TD>"& chr(13)  
                        mail2 = mail2 &   "<TD>" & dConvertWMItoVBSDate(.TimeGenerated) & "</TD>"& chr(13)  
                        mail2 = mail2 & "</TR>" & chr(13)  
                        i2 = i2 +1
                    End With
                        On Error Goto 0
                    elseif i2 > maxwert2 Then
                        i2fertig = "True"  
                        exit for
                    elseif dat1 < dat Then
                        ifertig="True"    
                    exit for                        
                End if
Next

        mail = mail &   "</Table>"& chr(13)  
        mail2 = mail2 &   "</Table>"& chr(13)  
        Set objEmail = CreateObject("CDO.Message")  
        objEmail.From = absender
        objEmail.To = empfanger
        objEmail.Subject = "Logwatch " & strserver & " - System Items: " & i & " Application Items: " & i2  
        objEmail.HTMLbody = "<HTML><Body>" & mail & "<br>" & mail2 & "</body></html>"  
        objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2  
        objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserver") = mailserver  
        objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = 25  
        objEmail.Configuration.Fields.Update
        objEmail.Send
wscript.quit


function IsOnline(host)
set WshShell = CreateObject("Wscript.Shell")  
set temp = wshshell.Exec ("ping.exe -n 1 -w 100 "&host)  
dummy = temp.StdOut.ReadAll
IF instr(1,dummy,"Antwort") >0 THEN  
isonline = true
ELSE
isonline = false
END IF
end Function

Private Function dConvertWMItoVBSDate(sDate)
  Dim sMonth, sDay, sYear, sHour, sMinutes, sSeconds
  sMonth = Mid(sDate,5,2)
  sDay = Mid(sDate,7,2)
  sYear = Mid(sDate,1,4)
  sHour = Mid(sDate,9,2)
  sMinutes = Mid(sDate,11,2)
  sSeconds = Mid(sDate,13,2)
  dConvertWMItoVBSDate = DateSerial (sYear, sMonth, sDay) + TimeSerial (sHour, sMinutes, sSeconds)
End Function