Re: SWbemDateTime to Win 2k Compatible
- From: "Richard Mueller [MVP]" <rlmueller-nospam@xxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 10 Dec 2007 17:33:31 -0600
I don't find information on a TimeGenerated property, but the TimeWritten
property of event logs is in UTC in the form:
yyyymmddHHMMSS.xxxxx-UUU
where:
yyyy is the year
mm is the month
dd is the day
HH is the hour
MM the minute
SS the second
xxxxxx milliseconds
UUU is number of minutes to subtract from current time to get UTC.
The TimeWritten property is not an Integer8 value, but a generalized
date/time format. To get logs written in the last two hours (accurate to
within one second) you could use code similar to:
============
' Get current date/time less 2 hours.
dtmStart = DateAdd("h", -2, Now())
' Convert to generalized date/time format.
strValue = CStr(Year(dtmStart)) _
& Right("0" & CStr(Month(dtmStart)), 2) _
& Right("0" & CStr(Day(dtmStart)), 2) _
& Right("0" & CStr(Hour(dtmStart)), 2) _
& Right("0" & CStr(Minute(dtmStart)), 2) _
& Right("0" & CStr(Second(dtmStart)), 2) _
& ".000000-480"
========
This assumes your time zone bias is -480 minutes. This value can be used in
the WMI query for event logs.
--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--
"Viper640" <pat@xxxxxxxxxx> wrote in message
news:32904264-6730-4CFE-BFBD-BD9817B15021@xxxxxxxxxxxxxxxx
they might help me a little, but if i convert the dates to integers will
the
wmi query recognize them as date time values or integers?
the end result is to get two values to input into the wmi query so i can
restrict the output of events to a few hours worth. the SWbemDateTime
function i used in the last script doosn't work on win 2k, so i need
another
method to compute the two dates. if converting them to integers will help
im
all for it but if the WMI wont accept them then i would need something
else.
thanks for all your help i will see if these help me. if anyone has other
ideas feel free to list them. thanks again!
--
Patrick Roye
Managed Services Dept.
Main Street Software, Inc.
"Richard Mueller [MVP]" wrote:
The SWbemDateTime object is not available in Windows 2000. It's a bit
hard
to tell what you are doing, but if you need to convert the current time
in
the local time zone to an Integer8 value in UTC, perhaps you can use this
VBScript example:
http://www.rlmueller.net/Programs/DateToInteger8.txt
The local time zone bias is read from the local registry. Any specifed
date/time value in the current time zone is converted to the
corresponding
Integer8 (64-bit) value in UTC.
Another method would be to use the w32tm.exe utility, but this also is
not
available on W2k. If you need to do the reverse (convert an Integer8
value
to a date/time in the current time zone), see this example:
http://www.rlmueller.net/Programs/Integer8Date.txt
--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--
.
- Follow-Ups:
- Re: SWbemDateTime to Win 2k Compatible
- From: Viper640
- Re: SWbemDateTime to Win 2k Compatible
- References:
- SWbemDateTime to Win 2k Compatible
- From: Viper640
- Re: SWbemDateTime to Win 2k Compatible
- From: Richard Mueller [MVP]
- SWbemDateTime to Win 2k Compatible
- Prev by Date: Re: how to get the file within time range?
- Next by Date: How to list memory information
- Previous by thread: Re: SWbemDateTime to Win 2k Compatible
- Next by thread: Re: SWbemDateTime to Win 2k Compatible
- Index(es):
Relevant Pages
|
