..., etc.

Example syntax for querying the Windows Event logs and getting simple text format out:

C:\>cscript.exe C:\windows\system32\eventquery.vbs /L Application /V /FI "Source
eq AdsmClientService" /FI "Datetime gt 01/31/2008,12:00:00AM"

You must use cscript.exe as the vbs processor.

C:\>cscript.exe C:\windows\system32\eventquery.vbs /L Application /V /FI "Source
eq AdsmClientService" /FI "Datetime gt 01/31/2008,12:00:00AM"
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.


------------------------------------------------------------------------------
Listing the events in 'application' log of host 'INFOED-DEV2'
------------------------------------------------------------------------------
Type          Event  Date Time               Source            ComputerName
Category        User                 Description
------------- ------ ----------------------- ----------------- ---------------
--------------- -------------------- -----------
Information   4097   1/31/2008 12:33:43 AM   AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  Execution of Schedule GEN_0030 Started
Information   4100   1/31/2008 12:14:43 AM   AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  Next Scheduled Event Obtained from Server T
SM (Windows):  
-------------------------------------------------------------  
Schedule Name:            GEN_0030  Action:
Incremental  Objects:                           (none)  Options:
       (none)  Server Window Start:    00:30:00 on 01/31/2008  
--------------------------------------------------------------
Information   4097   1/31/2008 12:33:43 AM   AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  Incremental backup of volume '\\infoed-dev2\c$'

Information   4097   1/31/2008 12:33:43 AM   AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  Incremental backup of volume '\\infoed-dev2\d$'

Information   4097   1/31/2008 12:33:43 AM   AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  Incremental backup of volume 'SYSTEMSTATE'

Information   4097   1/31/2008 1:34:29 AM    AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  Incremental backup of volume 'SYSTEMSERVICES'
 
Error         4099   1/31/2008 1:34:43 AM    AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  ANS4987E Error processing '\\infoed-dev2\c$
\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Operations
Manager\MOM2 Management Group\EventCons': the object is in use by another process
 
Error         4099   1/31/2008 1:37:38 AM    AdsmClientService INFOED-DEV2
None            NT AUTHORITY\SYSTEM  ANS4987E Error processing '\\infoed-dev2\c$
\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Operations
Manager\MOM2 Management Group\EventCons': the object is in use by another process