Reading Restored WMI Files

[barneymc]

Im wondering if anyone has come across a way of reading EventLogs using WMI. The event logs files are restored from another server.
Below is the C# class that executes the query.
NOTE : The event logs were created on a different (production) machine that I dont have access to. Is it possible to read these files viia WMI ?


ManagementObjec tSearcher searcher = null;
//Maybe add the namespace as a parameter in the future
string sNameSpace = "root\\cimv 2";

EventList foundentries = new EventList();

System.Manageme nt.ManagementSc ope oMs = new System.Manageme nt.ManagementSc ope("\\\\" + sMachineName + "\\" + sNameSpace);

// Although connection information is not used in this example, I'll show you how to construct it here
//Connection credentials to the remote computer - not needed if the logged in account has access
ConnectionOptio ns oConn = new ConnectionOptio ns();
oConn.Username = sUserName;
oConn.Password = sPassword;
oConn.Impersona tion = ImpersonationLe vel.Impersonate ;
oMs.Connect();
searcher = new ManagementObjec tSearcher(sWMIQ uery);
searcher.Get();
searcher.Scope = oMs;


int counter = 0;

//returns the records
foreach (ManagementObje ct Event in searcher.Get())
{

[bartonc]

I'm actually a python guy, myself, but I've recently found Scriptomatic 2.0 in order to try to get a handle on WMI.

Of course, there is always our .NET Forum where there are (no doubt) plenty of experts fielding C# quesstions.