__EventFilter, ROOT\subscription, VBScript samples

__EventFilter - VB Script code samples

Get instance of WMI class using GetObject, CreatorSID property of __EventFilter

Short VBS code - get a single specified instance of __EventFilter class or get a default unnamed instance (singleton) of the class, using one single command GetObject with exact path of the wmi object.

…

	
	'https://wutils.com/wmi/
	Dim wmiObject
	Set wmiObject = GetObject( _
	 "WINMGMTS:\\.\ROOT\subscription:" + _
	 "__EventFilter.Name=""SCM Event Log Filter""")
	Wscript.Echo wmiObject.CreatorSID 'or other property name, see properties

Alternative codes

SWbemServices.Get

Quickest and most efficient VB Script code to get a single instance by a key - SWbemServices.Get

…

	'https://wutils.com/wmi/
	Dim oWMI, Instance
	
	'Get base WMI object, "." means computer name (local)
	Set oWMI = GetObject("WINMGMTS:\\.\ROOT\subscription")
	
	Do
	  'Get the instance of __EventFilter 
	  Set Instance = oWMI.Get("__EventFilter.Name=""SCM Event Log Filter""")
	                    
	  'Do something with the instance
	  Wscript.Echo Instance.CreatorSID 'or other property name, see properties
	
	  'Wait for some time to get next value
	  Wscript.Sleep 1000
	Loop While True

WMI query - sample windows WQL

Get a specified instance of __EventFilter by a key, get a default unnamed instance (singleton) of the class or list instances of the class by wmi query using this VB Script.

See in another language: C#, VB.Net.

…

	'https://wutils.com/wmi/
	Dim oWMI, WQL, Instances, Instance
	
	'Get base WMI object, "." means computer name (local)
	Set oWMI = GetObject("WINMGMTS:\\.\ROOT\subscription")
	
	'Create a WMI query text 
	WQL = "Select * from __EventFilter Where Name=""SCM Event Log Filter"""
	
	'Get instances of __EventFilter 
	Set Instances = oWMI.ExecQuery(WQL)
	                    
	'Enumerate instances  
	For Each Instance In Instances 
	  'Do something with the instance
	  Wscript.Echo Instance.CreatorSID 'or other property name
	Next 'Instance

InstancesOf

List of all instances, wmi class __EventFilter.

…

	'https://wutils.com/wmi/
	Dim oWMI, Instances, Instance
	
	'Get base WMI object, "." means computer name (local)
	Set oWMI = GetObject("WINMGMTS:\\.\ROOT\subscription")
	
	'Get instances of __EventFilter - all instances of this class and derived classes 
	'Set Instances = oWMI.InstancesOf("__EventFilter")
	
	'Get instances of __EventFilter 
	Set Instances = oWMI.InstancesOf("__EventFilter", 1)
	
	
	'Enumerate instances  
	For Each Instance In Instances 
	  'Do something with the instance
	  Wscript.Echo Instance.CreatorSID 'or other property name
	Next 'Instance

WMI remote scripting - Locator, Connect

Get WMI management object using SWbemLocator.ConnectServer method. You can connect to a remote computer and specify Username/Password for the WMI connection.

…

	'https://wutils.com/wmi/
	Dim Locator, oWMI, WQL, Instances, Instance
	
	'Create Locator object
	Set Locator = CreateObject("WbemScripting.SWbemLocator")
	
	'Get base WMI object
	Set oWMI = Locator.ConnectServer("MachineName", "ROOT\subscription", "MachineName\administrator", "Password")
	 
	'.... continue using oWMI object

WUtils.com

Includes&Samples