I don't have that; but... inside this: http://www.mnscug.org/blogs/sherry-kissinger/338-some-limited-windows-installer-event-information-via-compliance-setting is the nutty routine (script) I used to pull out eventids 1033. You might be able to tweak that script to instead gather info from 1000 and 1001. (maybe, just offering it as a starting point to get you 30% there).
On Friday, October 31, 2014 8:04 AM, Stuart Watret <stu...@offshore-it.co.uk> wrote: Trying to collect scan times from our desktop fep estate. Before I reinvent the wheel, anyone have a script I could deploy to collect; Compname/Model/FullScanStart and End time. I realise the system event log holds this as events 1000 and 1001 respectively. Cheers Sent from a dog and bone.