一段备份windows 安全日志的脚本
AD server的安全日志增长很快，于是写了段vbs脚本做备份
strComputer = "."
targetLogs="security" '可用值为 application,system,security
BackupDest="d:event_log"&date&""
filename=BackupDest&targetLogs&CStr(date)&" "&replace(time,":","")&".evt"
Set ofso = wscript.CreateObject("Scripting.FileSystemObject")
if not ofso.FolderExists(BackupDest) then
Set f = ofso.CreateFolder(date) '创建文件夹
end if
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate,(Backup)}!" & _
strComputer & "rootcimv2") '获得 VMI对象
Set colLogFiles = objWMIService.ExecQuery _
("Select * from Win32_NTEventLogFile where LogFileName='"&targetLogs&"'")
For Each objLogfile in colLogFiles
errBackupLog = objLogFile.BackupEventLog(filename) '将日志备份
objLogFile.ClearEventLog() '将日志清空
If errBackupLog <> 0 Then
'Wscript.Echo "The event log could not be backed up."
else 'Wscript.Echo "success backup log"
End If
Next
来自 “ ITPUB博客 ” ，链接：https://blog.itpub.net/1698901/viewspace-103235/ ，如需转载，请注明出处，否则将追究法律责任。
