windows事件日志写入sqlserver

　　Set objConn = CreateObject(&ADODB.Connection&)

　　Set objRS = CreateObject(&ADODB.Recordset&)

　　objConn.Open &Provider=SQLOLEDB.1;Password=****;Persist Security Info=True;User ID=zhang;Initial Catalog=IPOPJ;Data Source=SV3SQLEXPRESS&

　　objRS.CursorLocation = 3

　　objRS.Open &SELECT * FROM EventTable& , objConn, 3, 3

　　Set dtmStartDate = CreateObject(&WbemScripting.SWbemDateTime&)

　　Set dtmEndDate = CreateObject(&WbemScripting.SWbemDateTime&)

　　DateToCheck = Date - 1

　　dtmEndDate.SetVarDate Date, True

　　dtmStartDate.SetVarDate DateToCheck, True

　　strComputer = &.&

　　Set objWMIService = GetObject(&winmgmts:& _

　　& &{impersonationLevel=impersonate}!& & strComputer & &rootcimv2&)

　　Set colEvents = objWMIService.ExecQuery _

　　(&Select * from Win32_NTLogEvent Where Logfile = 'Security' &_

　　& & And TimeWritten >= '&  & dtmStartDate & &' and TimeWritten < '& & dtmEndDate & &'&)

　　For each objEvent in colEvents

　　objRS.AddNew

　　objRS(&Category&) = objEvent.Category

　　objRS(&ComputerName&) = objEvent.ComputerName

　　objRS(&EventCode&) = objEvent.EventCode

　　objRS(&Message&) = objEvent.Message

　　objRS(&RecordNumber&) = objEvent.RecordNumber

　　objRS(&SourceName&) = objEvent.SourceName

　　objRS(&TimeWritten&) = objEvent.TimeWritten

　　objRS(&Type&) = objEvent.Type

　　objRS(&UserName&) = objEvent.User

　　objRS.Update

　　Next

　　objRS.Close

　　objConn.Close

关键词标签：windows,事件日志,sql