hello guys..need help on wmi event handling..

[ciffycyclops]

Hi
i have written a vbscript to manage permanent event consumer classes of wmi ..
here i used the NTEventLogEventConsumer class to store the specific event notification in the windows event log...heres my script....

strComputer = "."
Set objWMIServices = GetObject("winMgmts:" _
& "{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\subscription")
Set objEventFilterClass = objWMIServices.Get("__EventFilter")
Set objEventFilter = objEventFilterClass.SpawnInstance_()
objEventFilter.Name = "ProcessTrace"
objEventFilter.QueryLanguage = "WQL"
objEventFilter.Query ="SELECT * from __InstanceOperationEvent WHERE TargetInstance ISA 'Win32_ProcessTrace'"
objEventFilter.EventNamespace="root\cimv2"
objEventFilter.CreatorSID=Array(1,1,0,0,0,0,0,5,18 ,0,0,0)
objEventFilter.Put_()
Set objConsumerClass =objWMIServices.Get("NTEventLogEventConsumer")
Set objConsumer=objConsumerClass.SpawnInstance_()
objConsumer.Name="CONNTProcesstrace"
objConsumer.Category=0
objConsumer.SourceName="WinMgmts"
objConsumer.EventType=1
objConsumer.NumberOfInsertionStrings=2
objConsumer.CreatorSID=Array(1,1,0,0,0,0,0,5,18,0, 0,0)
objConsumer.InsertionStringTemplates=Array("%Targe tInstance.Name%","%TargetInstance.ProcessId%")
objConsumer.Put_()
Set objBindingClass=objWMIServices.Get("__FilterToCons umerBinding")
Set objBindingInstance=objBindingClass.SpawnInstance_( )
objBindingInstance.Consumer="CONNTProcesstrace"
objBindingInstance.Filter="ProcessTrace"
objBindingInstance.CreatorSID=Array(1,1,0,0,0,0,0, 5,18,0,0,0)
objBindingInstance.Put_()


now the script doesnt show any syntax error or runtime error....
but in the wbem log file it generates a message...

(Thu Feb 15 08:47:55 2007.711296) : Event subsystem was unable to perform the necessary operations to accomodate a change to the system state.
The state of the database may not reflect the state of the event subsystem (8004103A)

the error code "8004103A" refers to invalid object path...
but i cant figure it...which object path it reffering....
pls help me out of this...

[bartonc]

The Visual Basic forum is here. Try posting your question there. This is the sys/admin for Windows forum. Not many programmers check here regularly. Good luck. Also, read Posting guidelines to learn how to use code tags. They make you post structure readable. You can edit your post for 5 minutes to try and get it right. Thanks.

[ciffycyclops]

Hi
i have written a vbscript to manage permanent event consumer classes of wmi ..
here i used the NTEventLogEventConsumer class to store the specific event notification in the windows event log...heres my script....

strComputer = "."
Set objWMIServices = GetObject("winMgmts:" _
& "{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\subscription")
Set objEventFilterClass = objWMIServices.Get("__EventFilter")
Set objEventFilter = objEventFilterClass.SpawnInstance_() 
objEventFilter.Name = "ProcessTrace" 
objEventFilter.QueryLanguage = "WQL"
objEventFilter.Query ="SELECT * from __InstanceOperationEvent WHERE TargetInstance ISA 'Win32_ProcessTrace'" 
objEventFilter.EventNamespace="root\cimv2"
objEventFilter.CreatorSID=Array(1,1,0,0,0,0,0,5,18 ,0,0,0)
objEventFilter.Put_()
Set objConsumerClass =objWMIServices.Get("NTEventLogEventConsumer")
Set objConsumer=objConsumerClass.SpawnInstance_()
objConsumer.Name="CONNTProcesstrace"
objConsumer.Category=0
objConsumer.SourceName="WinMgmts"
objConsumer.EventType=1
objConsumer.NumberOfInsertionStrings=2
objConsumer.CreatorSID=Array(1,1,0,0,0,0,0,5,18,0, 0,0)
objConsumer.InsertionStringTemplates=Array("%TargetInstance.Name%","%TargetInstance.ProcessId%")
objConsumer.Put_()
Set objBindingClass=objWMIServices.Get("__FilterToConsumerBinding")
Set objBindingInstance=objBindingClass.SpawnInstance_( )
objBindingInstance.Consumer="CONNTProcesstrace"
objBindingInstance.Filter="ProcessTrace"
objBindingInstance.CreatorSID=Array(1,1,0,0,0,0,0, 5,18,0,0,0)
objBindingInstance.Put_()
 

now the script doesnt show any syntax error or runtime error....
but in the wbem log file it generates a message...

(Thu Feb 15 08:47:55 2007.711296) : Event subsystem was unable to perform the necessary operations to accomodate a change to the system state.
The state of the database may not reflect the state of the event subsystem (8004103A)

the error code "8004103A" refers to invalid object path...
but i cant figure it...which object path it reffering....
pls help me out of this...

[bartonc]

Cyberdyne:
There's no need to move this one. He's already copied the post there.