几个 WMI 的例子（初级） - 4

读取日志记录：

Imports System

Imports System.Management

Module Module1

    Public Sub Main()

        Dim strComputer = "magicdog"

        Dim wbemServices, wbemObjectSet, wbemObject

        wbemServices = GetObject("winmgmts:\\" & strComputer)

        wbemObjectSet = wbemServices.InstancesOf("Win32_NTLogEvent")

        For Each wbemObject In wbemObjectSet

            Console.WriteLine("日志文件：" & wbemObject.LogFile)

            Console.WriteLine("记录号：" & wbemObject.RecordNumber)

            Console.WriteLine("类型：" & wbemObject.Type)

            Console.WriteLine("产生时间：" & wbemObject.TimeGenerated)

            Console.WriteLine("源名称：" & wbemObject.SourceName)

            Console.WriteLine("事件代码：" & wbemObject.EventCode)

            Console.WriteLine("用户" & wbemObject.User)

            Console.WriteLine("计算机名：" & wbemObject.ComputerName)

            Console.WriteLine("信息：" & wbemObject.Message)

        Next

    End Sub

End Module

---------------------------------------------------------------------------------------

删除日志文件：（请先备份）

Imports System

Imports System.Management

Module Module1

    Public Sub Main()

        Dim strComputer = "."

        Dim objWMIService, objLogFiles, objLogFile, logs, mylogs(3)

        objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate,（Backup）}!\\" & strComputer & "\root\cimv2")

        mylogs(1) = "application"

        mylogs(2) = "system"

        mylogs(3) = "security"

        For Each logs In mylogs

            objLogFiles = objWMIService.ExecQuery("Select * from Win32_NTEventLogFile where LogFileName=´" & logs & "´")

            For Each objLogFile In objLogFiles

                objLogFile.ClearEventLog()

            Next

        Next

    End Sub

End Module

---------------------------------------------------------------------------------------

使用性能计数器：

Imports System

Imports System.Management

Module Module1

    Public Sub Main()

        Dim strComputer As String = ".", i, intValue As Integer

        Dim colItems, objWMIService, objItem

        objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

        For i = 1 To 5

            Threading.Thread.Sleep(1000)

            colItems = objWMIService.ExecQuery("Select * From Win32_PerfRawData_PerfProc_Process Where Name = ´devenv´")

            For Each objItem In colItems

                intValue = objItem.HandleCount

                Console.WriteLine("打开的句柄数 ：" & intValue)

            Next

        Next

    End Sub

End Module

使用Getobject函数创建对象多用于脚本中，所以参数为WMI脚本库的标记名"winmgmts:"和目标电脑名，上述的strComputer="."相当于localhost，若在远程计算机上执行则需将”.”改这相应的计算机名。

其中：

ManagementObject：单个管理对象

ManagementClass：单个管理类

ManagementObjectSearcher：查询管理对象及管理类的集合

ManagementEventWatcher：监视来自 WMI 的事件

ManagementQuery：用作所有查询类的基础。

也可以从脚本中创建：

Set oLocator = CreateObject("WbemScripting.SWbemLocator") ´ New SWbemLocator
If Err.Number <> 0 Then
    MsgBox "Windows Management (WMI) 不能被创建” & Err.Description
    WScript.Quit(0)
End If

-----------------------------------------------------------------------

set locator = createobject("WbemScripting.SwbemLocator")
set server = locator.ConnectServer ("\\192.168.0.1\root\cimv2","username","password")
set p_obj = server.execquery("select * form Win32_operatingsystem")
for each p_objswbem in p_obj
   p_objswbem.reboot ‘从新启动
next

  WMI 的有关概述请参考 MSDN 或

文章来源于领测软件测试网 https://www.ltesting.net/