exe log or app mon

[mesale0077]

hi

exe start time and stop time

 ı want to keep  log

log file

in app.log  file

info               appname              date                   time
-----------     -----------------    ----------------      -----------
started           msnmsgr.exe          06,08.2013            20.03
started           ccleaner.exe         06.08.2013            21.12
stopped           ccleaner.exe         06.08.2013            21.18
started           firefox.exe          06.08.2013            21.12
stopped           firefox.exe          06.08.2013            22.16

like this

or different ways how to

thank you now

[guinness]

FileOpen, FileWrite, @MSEC, @HOUR, @MIN, @TAB, FileClose. You should know the basics at least by now.

[JLogan3o13]

As always, the help file is your friend before posting. You can do this with _FileWriteLog.

[mesale0077]

ı know

As always, the help file is your friend before posting. You can do this with _FileWriteLog.

 

FileOpen, FileWrite, @MSEC, @HOUR, @MIN, @TAB, FileClose. You should know the basics at least by now.

 

but info exe look

vbs source  like it

exe event run FileOpen, FileWrite, @MSEC, @HOUR, @MIN, @TAB, FileClose

exe stop FileOpen, FileWrite, @MSEC, @HOUR, @MIN, @TAB, FileClose

look ,control apps

like usb ejec control

like app start end stop time keep log

ı want to know exes started and stopped  ,when ?

Edited August 6, 2013 by mesale0077

[JLogan3o13]

mesale. your answers are making very little sense. If English is not your native language, I would suggest using Google Translate as well as writing it in your native tongue. Something like this:

 

 

Я понятия не имею, какого черта вы собираетесь в о

 

Google Translate:

 

I have no idea what the heck you're going on about

[BrewManNH]

ProcessList will tell  you what apps are already running, keep an updated list going and look for any changes, if a new app is started, processlist will be different from the last time you checked, log the difference in your file. When it closes, the list will change again, log that.

[UEZ]

He wants to know which exe has been started on which time and log this to a file - not the exe started by AutoIt script.

Something like in Process Explorer image tab.

You can list all processes but afaik there is no additional information about start date/time.

Maybe in WinAPIEx.au3 is a solution...

Br,

UEZ

Edited August 6, 2013 by UEZ

[UEZ]

This might be helpful:

 

#Include <Date.au3>
#Include <WinAPIEx.au3>

Opt('MustDeclareVars', 1)

Global $aFT, $tFT, $tST, $ID = ProcessExists('SciTE.exe')

If $ID Then
$aFT = _WinAPI_GetProcessTimes($ID)
$tFT = _Date_Time_FileTimeToLocalFileTime(DllStructGetPtr($aFT[0]))
$tST = _Date_Time_FileTimeToSystemTime(DllStructGetPtr($tFT))
ConsoleWrite('SciTE was run at: ' & _WinAPI_GetTimeFormat(0, $tST) & @CR)
EndIf

You can get all processes you want, convert it with function and write it to a log file. The "stopped" time you can add when the PID doesn't exist anymore.

Slm,

UEZ

Edited August 6, 2013 by UEZ

[Gianni]

hi mesale0077

>this udf might interest you

among other things you can find functions like this:

; _ProcessGetTimes (); Returns Process Creation, Exit, Kernel / User-mode Times [<_WinTimeFunctions.au3> is helpful here)

and other assortments...

[mesale0077]

thank you

this links

'?do=embed' frameborder='0' data-embedContent>>

and

appmon

like this

worked

expandcollapse popup

#include <date.au3>
#include <misc.au3>

HotKeySet("{ESC}","ESC")
filedelete("app.log")
local $oerror = ObjEvent("AutoIt.Error", "_DeBug")

Local $Obj  = ObjGet("winmgmts:{impersonationLevel=impersonate}!\\" & @ComputerName & "\root\cimv2")
Local $hObj = ObjCreate("WbemScripting.SWbemSink")

If IsObj($Obj) And IsObj($hObj) Then
    ObjEvent($hObj, "SINK_")
    $Obj.ExecNotificationQueryAsync($hObj, "SELECT * FROM __InstanceCreationEvent WITHIN 0.1 WHERE TargetInstance ISA 'Win32_Process'")
    $Obj.ExecNotificationQueryAsync($hObj, "SELECT * FROM __InstanceDeletionEvent WITHIN 0.1 WHERE TargetInstance ISA 'Win32_Process'")
EndIf

Sleep(9999999999)

Func SINK_OnObjectReady($OB)
    local $str,$owner,$ret
    Switch $OB.Path_.Class
        Case "__InstanceCreationEvent"
           $str &= $OB.TargetInstance.ProcessID & " - "
            $str &= $ob.targetinstance.name & " - "
            $str &= _now() & "`"
            $str &= "- "&$ob.targetinstance.executablepath & @cr
            filewrite("app.log","!->> Started  " & $str& @CRLF)
            $str = ""
                
        Case "__InstanceDeletionEvent"
            $str &= $OB.TargetInstance.ProcessID & " - "
            $str &= $ob.targetinstance.name & " - "
            $str &= _now() & "`"
             filewrite("app.log","+->> Ended  " & $str& @CRLF)
            $str = ""
                    
    EndSwitch
    Return 1
EndFunc

Func _Debug($oError)
    ConsoleWrite( _
            "! ##################### AUTOIT OBJECT ERROR ######################################" & @CRLF & _
            "!                err.number is        : " & @TAB & hex($oError.number,8) & @CRLF & _
            "!                err.scriptline is    : " & @TAB & $oError.scriptline & @CRLF & _
            "!                err.windesc is       : " & @TAB & $oError.windescription & @CRLF & _
            "!                err.desc is          : " & @TAB & $oError.description & @CRLF & _
            "!                err.source is        : " & @TAB & $oError.source & @CRLF & _
            "!                err.retcode is       : " & @TAB & hex($oError.retcode,8) & @CRLF & _
            "! ################################################################################" & @CRLF _
            )
    Return 0
EndFunc

Func ESC()
    Exit(0)
EndFunc

Edited August 6, 2013 by mesale0077