[THIN] Re: OT: Vbscript, 2008 R2 and auditing printers

  • From: Steve Snyder <kwajalein@xxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Thu, 13 Jun 2013 08:23:19 +0200

unfortunately that gives me info about the object, not the data itself

    Count Length LongLength Rank SyncRoot IsReadOnly IsFixedSize
IsSynchronized  7 7 7 1 System.Object[] FALSE TRUE FALSE  7 7 7 1
System.Object[] FALSE TRUE FALSE


On Wed, Jun 12, 2013 at 7:57 PM, Pat Coughlin <strangedog@xxxxxxxxx> wrote:

> Your array is an object.
>
> $Array|export-csv C:\output.csv
>
> Patrick Coughlin
>
>
> On Wed, Jun 12, 2013 at 10:23 AM, Steve Snyder <kwajalein@xxxxxxxxx>wrote:
>
>> okay, pretty much got a PS script doing what I want except for - how the
>> &%#* do I convert an array into an object so I can export it to a CSV?
>>
>> I'm building my array with this command
>>
>> $array += ,@($i_counter, $UserName, $HostName, $Document, $Pages,
>> $Printer, $Log.TimeCreated)
>>
>> be really nice if I can create an object and expand it similarly.
>>
>>
>> On Wed, Jun 12, 2013 at 8:35 AM, Steve Snyder <kwajalein@xxxxxxxxx>wrote:
>>
>>> yep, found that as well as another PS script and have semi- got it to do
>>> what I want; been trying to avoid learning powershell up til now.
>>>
>>> also found a technet blurb that stated that vbscript cannot and will not
>>> access the enhanced logs (or whatever they're called), guess I will be
>>> assimilated after all
>>>
>>> thanks!
>>>
>>>
>>> On Tue, Jun 11, 2013 at 8:47 PM, Dan Dill <DanD@xxxxxxxxxx> wrote:
>>>
>>>>  This looks promising:
>>>> http://mywinsysadm.wordpress.com/2012/07/16/powershell-audit-printer-event-logs/
>>>> ****
>>>>
>>>> ** **
>>>>
>>>> ** **
>>>>
>>>> *Dan Dill** *|*Systems Engineer*  ****
>>>>
>>>> ** **
>>>>
>>>> *From:* thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] *On
>>>> Behalf Of *Steve Snyder
>>>> *Sent:* Tuesday, June 11, 2013 5:10 AM
>>>> *To:* thin@xxxxxxxxxxxxx
>>>> *Subject:* [THIN] OT: Vbscript, 2008 R2 and auditing printers****
>>>>
>>>> ** **
>>>>
>>>> So, I have my little crude script that reads event logs and gives me
>>>> the print details, for 2003 & 2008. Enter 2008 R2 and its expanded log
>>>> files - I'm having difficulty getting its event logs (auditing is enabled).
>>>> ****
>>>>
>>>> I've tried adding  Logfile='Microsoft-Windows-PrintService/Operational'
>>>> ****
>>>>
>>>> to the Select statement - didn't help.
>>>>
>>>> Any thoughts?
>>>>
>>>> excerpt:
>>>>
>>>> Set objWMIService = GetObject("winmgmts:" _
>>>>  & "{impersonationLevel=impersonate,(Security)}!\\" & strComputer &
>>>> "\root\cimv2")
>>>>
>>>> Set colOperatingSystems = objWMIService.ExecQuery _
>>>>  ("Select * from Win32_OperatingSystem")
>>>>
>>>> For Each objOperatingSystem in colOperatingSystems
>>>>  OS = objOperatingSystem.Caption & " " & objOperatingSystem.Version
>>>> Next
>>>>
>>>> If InStr(1,OS,"2003") > 0 Then 'this works
>>>>  Set colEvents=objWMIService.ExecQuery("Select * from Win32_NTLogEvent
>>>> WHERE EventCode=10 And SourceName='Print'")
>>>>  OSver = "2003"
>>>> ElseIf InStr(1,OS,"2008 R2") > 0 Then 'this no workie
>>>>  Set colEvents=objWMIService.ExecQuery("Select * from Win32_NTLogEvent
>>>> WHERE EventCode=307 And SourceName='PrintService'")
>>>>  OSver = "2008"
>>>> ElseIf InStr(1,OS,"2008") > 0 Then 'this works
>>>>  Set colEvents=objWMIService.ExecQuery("Select * from Win32_NTLogEvent
>>>> WHERE EventCode=10 And SourceName='Microsoft-Windows-PrintSpooler'")
>>>>  OSver = "2008"
>>>> Else
>>>>  WScript.Echo "Could not identify Operating system for " & strcomputer
>>>>  WScript.Quit
>>>> End If****
>>>>
>>>
>>>
>>
>

Other related posts: