Comments on: Enumerate The Remote Event Log with .NET

By: Steve

Steve — Wed, 17 Feb 2010 17:14:28 +0000

Is there a way to pass domain credentials with this script so it can be run against a different domain?

By: Sumudro

Sumudro — Wed, 18 Nov 2009 14:02:34 +0000

The script run with email facility with 32-bit pc events log. With 64-bit Exchange Server 2007, it’s not retruning events log. I checked $colItems.count returning 0, so that the for loop is not working and then logs return. Anyone has any solution. Thanks

By: Sumudro

Sumudro — Wed, 18 Nov 2009 13:05:27 +0000

I am new in PowerShell. The event log script is great. I ran without email that is ok. I also run with email, but the email body is showing empty. I am not sure the function EvtReader is returning empty string or ….. Can anyone reply, why i am getting no logs as body as email. Thanks

By: J Kavanagh

J Kavanagh — Fri, 28 Aug 2009 20:21:50 +0000

Okay so you now the value for $logs[#] but the number of logs is not the same (depending on OS, products installed, etc…) is there a way to for example get the System log entries?

By: Jesse Hamrick

Jesse Hamrick — Thu, 18 Jun 2009 22:34:57 +0000

Create the following variables and add it as part of the filter:
$Now = Get-Date
$lastWrite = $Now.AddDays(-7)

#now place in filter
-and($_.TimeWritten -ge $lastWrite)

I haven’t tested it yet but this works in other scripts I’ve written which get all errors recorded within last 7 days…

By: Brad B

Brad B — Thu, 18 Jun 2009 22:18:01 +0000

Great script… But I too would like to narrow down the results to 7 days or 24 hours..
Still new to PS

By: Sal

Sal — Mon, 13 Apr 2009 19:55:17 +0000

This script is great. Do you know of a way to add multiple host and filter by, say last 7 days?

Thanks

By: Samuel Flores

Samuel Flores — Wed, 25 Mar 2009 17:43:41 +0000

Hi, this post it’s great, easy and simple to use!!

By: Jesse Hamrick

Jesse Hamrick — Mon, 10 Nov 2008 17:37:07 +0000

Hal,
Excellent suggestion of using an array to simplify the filter.

By: Hal Rottenberg

Hal Rottenberg — Mon, 10 Nov 2008 00:01:45 +0000

Great post! I’ve got something which will simplify the filter quite a bit.

$events = @( 608, 609, 626, 627 ) # and so on…
if ( $events -contains $item.EventID ) { doStuff }