event log as .csv

[ipeca]

I'm trying to write a script that will save all of my event logs for me on a weekly basis. I have pieced together enough that I have a working script. However, I can't firgure out how to save the log file in a .csv format. Yes, saving in the .evt format would work, boss want's it in .csv....I don't know why.

Anyway, can anyone point in the direction I need to go?

Thanks

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate,(Backup)}!\\" & _
        strComputer & "\root\cimv2")
dtmThisDay = Day(Date)
dtmThisMonth = Month(Date)
dtmThisYear = Year(Date)
strBackupName = dtmThisYear & "_" & dtmThisMonth & "_" & dtmThisDay


Set colLogFiles = objWMIService.ExecQuery _
    ("Select * from Win32_NTEventLogFile where LogFileName='Security'")

Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate,(Backup,security)}!\\" & _
        strComputer & "\root\cimv2")

For Each objLogfile in colLogFiles
    errBackupLog = objLogFile.BackupEventLog("C:\Documents and Settings\macneill\My Documents\test\sec" & strBackupName & ".evt")
    If errBackupLog <> 0 Then        
        Wscript.Echo "The security event log could not be backed up."
    End If
Next

 

[dilettante]

Looked at Log Parser 2.2?

 

[tsuji]

>I can't firgure out how to save the log file in a .csv format.
You can do it by writing out data parcel one-by-one per your own specification of csv. Otherwise, use some utility as suggested. That is what vbs can do until ms decides one day some method should be added to the class for alternative backup format.

If you want to want to have thing done auto by some script naitive method, you can look into powershell. It provisions with two cmdlets: get-eventlog:

http://technet.microsoft.com/en-us/library/bb978657.aspx

and export-csv:

http://technet.microsoft.com/en-us/library/bb978597.aspx

Connect the cmdlets one after the other with the pipe would get the backup output csv done.

 

[ipeca]

Well no wonder I couldn't figure out how to do it from VBS. Thanks for the help....time to dream up an alternative solution.

 

[dilettante]

But LogParser is both a utility and an ActiveX DLL that you can automate from within a WSH script. It will probably be able to do far more than what you need, and is intended for just such a purpose as you describe.