Reading Restored WMI Files

[barneymc]

Im wondering if anyone has come across a way of reading EventLogs using WMI. The event logs files are restored from another server.
Below is the C# class that executes the query.
NOTE : The event logs were created on a different (production) machine that I dont have access to. Is it possible to read these files viia WMI ?


ManagementObjectSearcher searcher = null;
//Maybe add the namespace as a parameter in the future
string sNameSpace = "root\\cimv2";

EventList foundentries = new EventList();

System.Management.ManagementScope oMs = new System.Management.ManagementScope("\\\\" + sMachineName + "\\" + sNameSpace);

// Although connection information is not used in this example, I'll show you how to construct it here
//Connection credentials to the remote computer - not needed if the logged in account has access
ConnectionOptions oConn = new ConnectionOptions();
oConn.Username = sUserName;
oConn.Password = sPassword;
oConn.Impersonation = ImpersonationLevel.Impersonate;
oMs.Connect();
searcher = new ManagementObjectSearcher(sWMIQuery);
searcher.Get();
searcher.Scope = oMs;


int counter = 0;

//returns the records
foreach (ManagementObject Event in searcher.Get())
{

[bartonc]

I'm actually a python guy, myself, but I've recently found Scriptomatic 2.0 in order to try to get a handle on WMI.

Of course, there is always our .NET Forum where there are (no doubt) plenty of experts fielding C# quesstions.