sub BackupEvt {
package Win32::LSA;
use base qw/Win32::API::Interface/;
use Win32::EventLog;

__PACKAGE__->generate( "Advapi32.dll", "LogonUserA", "PPPIIP", "I", "logon_user" );
__PACKAGE__->generate( "Advapi32.dll", "ImpersonateLoggedOnUser", "I", "I", "impersonate_as" );
__PACKAGE__->generate( "Advapi32.dll", "RevertToSelf", "", "I", "revert" );

1;

use Win32 ();
my $token = "\0" x 4;

print "######LOGIN-INFOS######\n";
print 'Domain: ';
chomp(my $domain = <STDIN>);
print 'User: ';
chomp(my $user = <STDIN>);
my $password=&getpassword();
print "\nServer: "; 
chomp(my $server = <STDIN>);
$server="Servername123";

my $lsa = Win32::LSA->new;
my $rc = $lsa->logon_user( $user, $domain, $password, 2, 0, $token);
die Win32::FormatMessage( Win32::GetLastError ) unless $rc;

print "Logon success:\n";
$rc = $lsa->impersonate_as( unpack 'L', $token );
die Win32::FormatMessage( Win32::GetLastError ) unless $rc;
print "Impersonate success.\n";

my $count = 0;
while ($count < 2) { 
        $myServer="\\\\$server";     # your servername here.
        my($date)=join("-", ((split(/\s+/, scalar(localtime)))[0,1,2,4]));
        my($dest);
        #Eventlogdateinamen
        my $evtDate = '29.3.2010';
        
        for my $eventLog ("Application", "System") {
                        $handle=Win32::EventLog->new($eventLog, $myServer)
                                        or die "Can't open $EventLog on $myServer\n";
                        my($name)=$server.'_'.$eventLog.'_'.$date;
                        $dest="E:\\Share\\Logs\\events\\\\$name.evt" || die print "Could not open $dest from $server";
                        $handle->Backup($dest)
                                        or warn "Could not backup and clear the $eventLog EventLog on $myServer ($^E)\n";
                        ###EVT-Dateien auf dem Server auswerten###
                        \&GetEvents($server,$dest,$evtDate,$eventLog);
                        ###########################     
                        $handle->Close;
        }

        
                
        ###Daten lokal auf den PC speichern###
        #Netzlaufwerk verbinden
        #Ordner erstellen
        #Auswertung speichern
        ###########################
        &connect($domain, $user, $password, $server);   
        &folder;
        &copy($name);
        ###########################
        
        
        if ($server =~ /main/) {
                $server =~ tr/main/backup/;}
        else {last;}
        $count++
}

$rc = $lsa->revert;
die Win32::FormatMessage( Win32::GetLastError ) unless $rc;

my @return = ($domain, $user, $password, $server, $name);
return @return;
}