jaebooth.blogg.se

Get-EventLog -LogName System -InstanceId 10016 -Source DCOM Get events from an event log with an InstanceId and Source value : The – EntryType parameter filters the events to show only Error events.

Get-EventLog -LogName System -EntryType Error Get error events from a specific event log : The – Descending parameter sorts the list in order by count from highest to lowest. The Sort-Object cmdlet uses the – Property parameter to sort by the count of each source name. The – NoElement parameter removes the group members from the output. Group-Object uses the – Property parameter to group the objects by source and counts the number of objects for each source. The $Events objects are sent down the pipeline to the Group-Object cmdlet. The event objects are stored in the $Events variable. The – Newest parameter selects the 1000 most recent events. The Get-EventLog cmdlet uses the – LogName parameter to specify the System log. $Events | Group-Object -Property Source -NoElement | Sort-Object -Property Count -Descending $Events = Get-EventLog -LogName System -Newest 1000 The – Newest parameter returns the five most recent events.įind all sources for a specific number of entries in an event log : The Get-EventLog cmdlet uses the – LogName parameter to specify the System event log. Get recent entries from an event log on the local computer : The Get-EventLog cmdlet uses the – List parameter to display the available logs. The names in the Log column are used with the – LogName parameter to specify which log is searched for events. To get logs that use the Windows Event Log technology in Windows Vista and later Windows versions, use Get-WinEvent.

NOTE: PowerShell cmdlets that contain the EventLog noun work only on Windows classic event logs such as Application, System, or Security. The cmdlet gets events that match the specified property values. You can use the Get-EventLog parameters and property values to search for events. To get logs from remote computers, use the -ComputerName parameter. The Get-EventLog cmdlet gets events and event logs from local and remote computers.

Each week, Adam will walk you through a PowerShell command, showing you when and how to use each one. This is a part of an on-going blog series written by Adam Gordon.