How to take backup of event log using C# and WMI

Question

0.00/5 (No votes)

See more:

Hi,
I have written C# code to backup eventlog.It is returning a return code of 3.what does it mean? Please let me know if there is any error in my code or an alternate way to get a backup
Here is my code

C#

private void BackupEventLog()
{
    try
    {
        ManagementObjectSearcher searcher;
        ObjectQuery query;
        ConnectionOptions connection;
        ManagementScope scope = null;

        if ((txtUsername.Text != "") && (txtPassword.Text != ""))
        {
            connection = new ConnectionOptions();
            connection.Username = txtUsername.Text;
            connection.Password = txtPassword.Text;
            connection.Authority = "ntlmdomain:DOMAIN";

            scope = new ManagementScope("\\\\" + txtIP.Text + "\\root\\CIMV2", connection);
            scope.Connect();
        }
        else
        {
            scope = new ManagementScope();
        }
        scope.Options.EnablePrivileges = true;
        scope.Options.Impersonation = ImpersonationLevel.Impersonate;
        query = new ObjectQuery("Select * from Win32_NTEventLogFile Where LogFileName='Application'");
        searcher = new ManagementObjectSearcher(scope, query);

        foreach (ManagementObject o in searcher.Get())
        {
            ManagementBaseObject inParams = o.GetMethodParameters("BackupEventlog");
            inParams["ArchiveFileName"] = @"c:\scripts\Application.evt";
            ManagementBaseObject outParams=o.InvokeMethod("BackupEventLog", inParams, null);
            Response.Write(outParams.Properties["ReturnValue"].Value.ToString());
        }
    }
    catch (Exception ex)
    {
        Response.Write(ex.Message);
    }
}

Thank you in advance

[Added code formatting]

Posted 9-Mar-10 18:51pm

forme

Updated 10-Mar-10 1:30am

Toli Cuturicu

v2

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sandeep Mewara · Answer 1 · 2010-03-09T22:55:00

Have a look at this:
Back Up and Clear an Event Log(Microsoft) [^]

Also a Code Snippet:

VB

Private Declare Function BackupEventLog Lib "advapi32.dll" Alias "BackupEventLogA" (ByVal hEventLog As IntPtr, ByVal lpBackupFileName As String) As Integer
Private Declare Function CloseEventLog Lib "advapi32.dll" (ByVal hEventLog As IntPtr) As IntPtr
Private Declare Function OpenEventLog Lib "advapi32.dll" Alias "OpenEventLogA" (ByVal lpUNCServerName As String, ByVal lpSourceName As String) As IntPtr

Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
    Dim hEventLog As IntPtr
    Dim lretv As Integer
    hEventLog = OpenEventLog(vbNullString, "Application")
    If hEventLog = IntPtr.Zero Then
        System.Diagnostics.Debug.Write("OpenEvent Log Failed")
        Exit Sub
    End If
    lretv = BackupEventLog(hEventLog, "appback.evt")
    If lretv = 0 Then
        Debug.Write("BackupEventLog Failed")
        Exit Sub
    End If
End Sub