I tried you above script with no success, i want to be able to run the script every couple of hours and get sent an event log for the server. im a newb at powershell but when i run the script it returns with an email but no body. i think i only have version 1 of powershell, please help.

I found the solution for this script: here you have used $logs[5].entries to check for security logs.

I tested this in powershell 2.0 and found that this will open the system logs; not security logs. So if you want to search for security events, including the ones mentioned in your example; you need to use: $logs[4].entries instead and then your reports should come.

Basically i am trying to find out the failed login instances on windows 2003 server. i had written a script in perl, but there’s a limitation that perl cant be installed on the server; hence i need to re-write it in powershell / vbscript. I chose powershell as it looked to do most of the stuff that we can do in unix bash.
However this script is not printing anything; and i’m afraid i’m running out of time to accomplish this task.

Could someone pls help me in this?
Appreciate your comments in this regards.

Adding my script for reference purposes
# Get the computer name
$computer = gc env:computername

# Get current date
$Now = get-date

#Get day before yesterday
$lastwrite = $Now.AddDays(-2)

$logs = [System.Diagnostics.EventLog]::GetEventLogs(“$computer”)

$colItems = $logs[5].entries

$events = @(“529″, “530″, “531″, “532″, “533″, “534″, “535″, “537″, “539″, “644″)

foreach ($item in $colItems)
{
if (($events -contains $item.EventID))
{
$item.MachineName
$item.EventID
$item.TimeWritten
$item.Category
$item.EntryType
$item.UserName
$item.Data
$item.Source
$item.TimeGenerated
$item.Message

}
}

#now place in filter
-and($_.TimeWritten -ge $lastWrite)

I haven’t tested it yet but this works in other scripts I’ve written which get all errors recorded within last 7 days…

Thanks