code:

---

$obj = GetObject("Winmgmts:").ExecQuery("Select * From Win32_NTLogEvent Where Type = 'error'")

For each $event in $obj
$event.EventCode 
" "
$event.Message
?
Next

---

code:

---

FUNCTION LISTPROC($COMPUTER,$PROC)
	$pidselect="select * from Win32_Process where Name='$PROC'"
	$processes=GetObject("winmgmts:{impersonationLevel=impersonate}!//$COMPUTER").ExecQuery("$pidselect") 
	For each $Process in $processes
		?$COMPUTER+ " " +$Process.Name + " is running. PID is " + $Process.ProcessId
		Next

	$ntbselect="Select * From Win32_NTLogEvent Where SourceName = 'ntbackup'"
	$ntbackup =GetObject("winmgmts:{impersonationLevel=impersonate}!//$COMPUTER").ExecQuery("$ntbselect")
	For each $event in $ntbackup
		$ec=$event.EventIdentifier
		$time=$event.TimeGenerated
		$year=substr("$time",1,4)
		$month=substr("$time",5,2)
		$day=substr("$time",7,2)

		? "$ec	$month/$day/$year"
		? $event.Message
		Next

	? $computer + " " +@serror
	ENDFUNCTION

---

code:

---

SELECT TOP 5 * FROM Win32_Process WHERE Name=$PROC

---

code:

---

SELECT TOP 5 * FROM Win32_Process WHERE Name=$PROC ORDER BY Date DESC Time DESC

---

code:

---

break on
$day1 = "@MDAYNO"
$month1 = "@MONTHNO"
$year1 = "@YEAR"
If LEN($day1) = 1 $day1 = "0" + $day1 Endif
If LEN($month1) = 1 $month1 = "0" + $month1 Endif
$time1 =  $year1 + $month1 + $day1
$count = 0
While $instancetarget < 5
$count = $count + 1
 $ntbackup =GetObject("winmgmts:").ExecQuery("Select * From Win32_NTLogEvent Where SourceName = 'ntbackup' AND TimeGenerated >= '" + $time1 + "'")
 $instancetarget = $ntbackup.count
$time1 =  VAl($time1) - 1
if $count > 200 $instancetarget = 5
Loop

  For each $event in $ntbackup
    $ec=$event.EventIdentifier
    $time=$event.TimeGenerated
    $year=substr("$time",1,4)
    $month=substr("$time",5,2)
    $day=substr("$time",7,2)
? $time
    ? "$month/$day/$year"
    ? $event.Message
    Next

---