{"id":64393,"date":"2007-07-24T00:59:00","date_gmt":"2007-07-24T00:59:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2007\/07\/24\/how-can-i-check-every-30-minutes-to-see-if-a-file-has-been-modified\/"},"modified":"2007-07-24T00:59:00","modified_gmt":"2007-07-24T00:59:00","slug":"how-can-i-check-every-30-minutes-to-see-if-a-file-has-been-modified","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/how-can-i-check-every-30-minutes-to-see-if-a-file-has-been-modified\/","title":{"rendered":"How Can I Check Every 30 Minutes to See If a File Has Been Modified?"},"content":{"rendered":"

\"Hey, \n

Hey, Scripting Guy! How can I monitor an application\u2019s log file and issue an alert if the timestamp on that file hasn\u2019t changed in the last 30 minutes?

— JA <\/P>\"Spacer\"\"Hey,\"Script<\/A> \n

Hey, JA. You know that\u2019s a very interesting question, and one that \u2013 say, wait a second. You\u2019re not JA from Stanwood<\/I>, <\/I>WA<\/I> are you? Are you sure about that? Well, OK; we\u2019ll take your word for it, and we\u2019ll try to answer your question. But if you are<\/I> from Stanwood, WA \u2026.<\/P>\n

Not that the Scripting Guy who writes this column has anything against Stanwood, WA, mind you; it\u2019s just that the Scripting Guy who writes this column has something against Stanwood, WA. The other day this Scripting Guy found himself with a little time to kill in Stanwood, the Scripting Son having to arrive in town some 90 minutes prior to a doubleheader with the Skagit Sox. Being behind on his work, and having snuck out of the office at noon in order to get to Stanwood on time, the Scripting Guy who writes this column was glad to have 90 minutes to kill: that gave him just enough time to go get some ice cream before the game started.<\/P>\n

Or so he thought. But here\u2019s a tip for you: if you ever find yourself in Stanwood, WA, don\u2019t bother looking for ice cream; they don\u2019t have any. With seemingly-plenty of time on his hands the Scripting Guy who writes this column walked over to a nearby shopping center, one chockfull of stores and restaurants, none of which actually sold ice cream. (You know, real<\/I> ice cream, like a hot fudge sundae.) At one point the Scripting Guy who writes this column saw a huge sign proclaiming Ice Cream<\/B>; as he rounded the corner, however, he discovered that the place was locked up tight as a drum.<\/P>\n\n<\/THEAD>\n\n\n
\n

Note<\/B>. So did the ice cream shop gone out of business, or did they simply lock the doors and pull the blinds when they saw this Scripting Guy headed their way? Good question \u2026.<\/P><\/TD><\/TR><\/TBODY><\/TABLE>\n

<\/DIV>\n

Eventually the Scripting Guy who writes this column gave up on finding an old-fashioned hot fudge sundae and decided to get some ice cream at McDonald\u2019s instead. \u201cOh, ice cream,\u201d said the girl behind the counter. \u201cWe\u2019re all out of ice cream \u2026.\u201d<\/P>\n

Right \u2026.<\/P>\n

In the end, the Scripting Guy who writes this column never did get his ice cream, and the Scripting Son and his team went on to lose both ends of the doubleheader. Coincidence? We think not.<\/P>\n

Oh, well; in the great good news\/bad news scheme of life, that\u2019s the bad news. The good news? With no hot fudge sundae to occupy his time, the Scripting Guy who writes this column was able to do something he hadn\u2019t really planned on doing: write this column.<\/P>\n

As you might expect, there are a number of different ways we could have approached the problem of monitoring a log file and issuing an alert if the timestamp on that file hasn\u2019t changed in the last 30 minutes. After carefully weighing all these alternative approaches can we assume that the Scripting Guys chose the best possible<\/I> method for carrying out this task? Heavens no. However, you can<\/I> assume that the Scripting Guys chose the easiest<\/I> possible method for carrying out this task:<\/P>

strComputer = “.”<\/p>\n
Set objWMIService = GetObject(“winmgmts:\\\\” & strComputer & “\\root\\cimv2”)<\/p>\n
Set colFiles = objWMIService.ExecQuery _\n    (“Select * from CIM_Datafile Where Name = ‘C:\\\\Scripts\\\\Application.log'”)<\/p>\n
For Each objFile in colFiles\n    strOriginalTimestamp = objFile.LastModified\nNext<\/p>\n
Wscript.Echo “Monitoring application log file: ” & Now\nWscript.Echo<\/p>\n
Do While True\n    Wscript.Sleep 1800000\n    Set colFiles = objWMIService.ExecQuery _\n        (“Select * from CIM_Datafile Where Name = ‘C:\\\\Scripts\\\\Application.log'”)<\/p>\n
    For Each objFile in colFiles\n        strLatestTimestamp = objFile.LastModified\n    Next <\/p>\n
    If strLatestTimestamp <> strOriginalTimestamp Then\n        strOriginalTimestamp = strLatestTimeStamp\n    Else\n        Wscript.Echo “ALERT: ” & Now\n        Wscript.Echo “The application log file has not been modified in the last 30 minutes.”\n        Wscript.Echo\n        strOriginalTimestamp = strLatestTimeStamp\n    End If\nLoop\n<\/PRE>\n
Let\u2019s see if we can explain how this works. To begin with, we connect to the WMI service on the local computer. This was one of the first decisions we had to make: do we use WMI to carry out this task, or do we use some alternate technology, such as the FileSystemObject? We opted to go with WMI, and for one simple reason: this enables us to write a script that can monitor a log file on a remote computer just as easily as it can monitor a log file on the local computer. Need to perform this task against a log file on the remote computer atl-fs-01? No problem; just assign the name of that computer to the variable strComputer:<\/P>
strComputer = “atl-fs-01”\n<\/PRE>\n
Our next step is to determine the last time the file was changed; we need to know the current value of the file\u2019s LastModified<\/B> property in order to tell whether or not that value (and thus the file itself) has changed in the past 30 minutes. With that in mind, we use this line of code to select all the instances of the CIM_Datafile<\/B> class that have a Name<\/B> (path) equal to C:\\\\Scripts\\\\Application.log:<\/P>
Set colFiles = objWMIService.ExecQuery _\n    (“Select * from CIM_Datafile Where Name = ‘C:\\\\Scripts\\\\Application.log'”)\n<\/PRE>\n
And yes, that is<\/I> C:\\\\<\/B>Scripts\\\\<\/B>. Because the \\ is a reserved character in WMI, any \\ that appears in a WQL query needs to be \u201cescaped;\u201d that is, we need to preface it with another \\.<\/P>\n
Admittedly that\u2019s a little strange. But nowhere near as strange as a town completely devoid of ice cream.<\/P>\n
After making the connection we set up a For Each loop to loop through the collection of files returned by the query. (Needless to say, there can be only one such file in the collection.) We then use this line of code to assign the value of the LastModified property to a variable named strOriginalTimestamp:<\/P>
strOriginalTimestamp = objFile.LastModified\n<\/PRE>\n
All of that is required just to give us a starting point; now we need to do some real work. To that end, we set up a Do While loop designed to run forever and ever (or at least for as long as True is equal to True):<\/P>
Do While True\n<\/PRE>\n
What\u2019s the first thing we do inside that loop? In a sense, nothing at all; the first thing we do is call the Sleep <\/B>method and pause the script for 30 minutes:<\/P>
Wscript.Sleep 1800000\n<\/PRE>\n\n<\/THEAD>\n\n\n
\n
Note<\/B>. In case you\u2019re wondering, the 1800000 represents 1,800,000 milliseconds. There are 1,000 milliseconds in a second; 60,000 milliseconds in a minute; and 1,800,000 milliseconds in 30 minutes (1,000 x 60 x 30).<\/P><\/TD><\/TR><\/TBODY><\/TABLE>\n
<\/DIV>\n
When those 30 minutes are up we check the current<\/I> value of the log\u2019s LastModified property; to do that, we reconnect to the file, then store the value of the LastModified property in a variable named strLatestTimestamp:<\/P>
strLatestTimestamp = objFile.LastModified\n<\/PRE>\n
That brings us to this line of code:<\/P>
If strLatestTimestamp <> strOriginalTimestamp Then\n<\/PRE>\n
What are we doing here? Well, here we\u2019re comparing the original timestamp with the current timestamp. Suppose the two timestamps are different; what does that mean? That can only man one thing: the file must have been modified sometime during the past 30 minutes. Therefore, we simply assign the current timestamp (strLatestTimestamp) to the variable strOriginalTimestamp, loop around, pause the script for another 30 minutes, then perform this check again.<\/P>\n
That was easy. Now, what if the two timestamps are identical<\/I>? Again, there\u2019s only one possible explanation: if the two timestamps are identical that means the file must not<\/I> have been modified in the past 30 minutes. In that case, we use the following lines of code to echo a message back to the command window (and yes, like most monitoring scripts you really<\/I> want to run this one in a command window under the CScript script host<\/B><\/A>):<\/P>
Wscript.Echo “ALERT: ” & Now\nWscript.Echo “The application log file has not been modified in the last 30 minutes.”\nWscript.Echo\n<\/PRE>\n
That\u2019s going to result in a message similar to this appearing onscreen:<\/P>
ALERT: 7\/20\/2007 1:26:35 PM\nThe application log file has not been modified in the last 30 minutes.\n<\/PRE>\n
We then assign the current timestamp to the variable strOriginalTimestamp, loop around, pause the script for another 30 minutes, then perform the check again. This process continues until the end of time, or until you terminate the script or close the command window.<\/P>\n
Whichever comes first. And we\u2019re guessing all of those things will happen long before they get any ice cream in Stanwood.<\/P>\n
Needless to say, you aren\u2019t limited to echoing back an alert; if you want to you can send an email, write an event to the event log, or do pretty much anything else you want. We\u2019ll leave that up to you.<\/P>\n
We hope that answers your question, JA. If it turns out that you really are<\/I> JA from Stanwood, WA then no doubt you have another question as well: you\u2019re wondering if the Scripting Guy who writes this column will hold it against you just because he couldn\u2019t find any ice cream in your town. Well, JA, the answer to your unasked question is this: you bet he does. But don\u2019t worry; just send a hot fudge sundae to the following address and we\u2019ll call it good:<\/P>\n
The Scripting Guy Who Writes That Column
Microsoft Corporation
Building 42\/4039
Redmond, WA 98052<\/P>\n
P.S. Extra whipped cream, and no maraschino cherry. Thanks!<\/P><\/p>\n","protected":false},"excerpt":{"rendered":"
Hey, Scripting Guy! How can I monitor an application\u2019s log file and issue an alert if the timestamp on that file hasn\u2019t changed in the last 30 minutes?— JA Hey, JA. You know that\u2019s a very interesting question, and one that \u2013 say, wait a second. You\u2019re not JA from Stanwood, WA are you? Are […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[42,38,3,4,12,5],"class_list":["post-64393","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-events-and-monitoring","tag-files","tag-scripting-guy","tag-scripting-techniques","tag-storage","tag-vbscript"],"acf":[],"blog_post_summary":"
Hey, Scripting Guy! How can I monitor an application\u2019s log file and issue an alert if the timestamp on that file hasn\u2019t changed in the last 30 minutes?— JA Hey, JA. You know that\u2019s a very interesting question, and one that \u2013 say, wait a second. You\u2019re not JA from Stanwood, WA are you? Are […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/64393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=64393"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/64393\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=64393"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=64393"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=64393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}