ComSpec syntax issue

[mdwerne]

Can anyone help me correctly format the following command line? All of my attempts have proven fruitless.

wevtutil qe Application /q:"*[System[Provider[@Name='EMET']]]" /rd:true /c:1 /f:text > c:\EMET.log

Here is what I've tried:

Local $Result = RunWait(@ComSpec & " /c wevtutil.exe qe Application /rd:true /c:1 /q:*[System[Provider[@Name=EMET]]] /f:text > " & $LogFile, @SystemDir, @SW_SHOW)

Local $Result = RunWait(@ComSpec & ' /c wevtutil.exe qe Application / q:" *[System[Provider[@Name = "EMET"]]]" / rd:true / c:1 / f:text > ' & $LogFile, @SystemDir, @SW_HIDE)

Local $Result = RunWait(@ComSpec & " /c wevtutil.exe qe Application / q:"*[System[Provider[@Name='EMET']]]" / rd:true / c:1 / f:text > " & $LogFile, @SystemDir, @SW_HIDE)

Thanks for any suggestions,

-Mike

[Andreik]

Try this:

Local $Result = RunWait(@ComSpec & ' /c wevtutil qe Application /q:"*[System[Provider[@Name=' & "'EMET']]]" & '" /rd:true /c:1 /f:text > c:EMET.log', @SystemDir, @SW_SHOW)

[mdwerne]

Try this:

Local $Result = RunWait(@ComSpec & ' /c wevtutil qe Application /q:"*[System[Provider[@Name=' & "'EMET']]]" & '" /rd:true /c:1 /f:text > c:EMET.log', @SystemDir, @SW_SHOW)

BIMBO!!!

Thanks for the help Andreik, works perfectly! I really need to get a better handle on single and double quotes, this stuff trips me up almost everytime.

-Mike