How to Search EventLog Using PowerShell

-

In this post I will show you some tips on how you can search your computers EventLog using PowerShell.

This can be very powerful if you need to search for e.g. a specifik error in the EventLog. 

Basic Get-EventLog command

The basic command is like shown below.

Get-EventLog -LogName System

If you want to you can filter using the parameter -EntryType to see only e.g. Errors in the eventlog:

Get-EventLog -LogName System -EntryType Error

In order to only see the newest 10 error you can enter the command below:

Get-EventLog -LogName System -EntryType Error -Newest 10

Run Get-EventLog on Remote computer

In order to check the EventLog on a remote computer you will have to use the Invoke command as shown below:


All you need to do is to replace localhost with the name of the remote computer, where you want to run the command.

For more information about the PowerShell Get-EventLog cmd-let check out Microsoft docs



Comments

Post a Comment

Popular posts from this blog

Use PowerShell to Discover Network Switch and port number

-
Image
 If you are working with Networks, that I am, you can sometimes have trouble to find out what switch port a computer is connected to. That can be because of bad marking of a network socket or because a cable simply just disappear into a wall and you are not able to follow it all the way to the rack cabinet. Let me show you an easy way to discover not just port number, but also name of the switch and VLAN for the connection. You will have to run the script below as an administrator, in order for it to work. Script: # Is Module installed - install if not available. if (Get-Module -ListAvailable -Name PSDiscoveryProtocol) {   Import-Module PSDiscoveryProtocol } else {   Install-Module -Name PSDiscoveryProtocol -Force   Import-Module PSDiscoveryProtocol } $Packet = Invoke-DiscoveryProtocolCapture -Type LLDP Get-DiscoveryProtocolData -Packet $Packet Be aware that you will need to have a manage lager 3 switch,  for the LLDP protocol,  to collect these information...
Read more

Use ChatGPT to write PowerShell Scripts

-
Image
 Did you know that ChatGPT can help you to write PowerShell scripts? You properly have heard about ChatGPT, but did you knew that ChatGPT can help you write PowerShell scripts? Asking ChatGPT for a script to perform a simple task Let me show you a little example how you can ask ChatGPT for help creating a script: The result from ChatGTP: It is actually that simple. I have used PowerShell to help me with scripts that can do all kind of stuff. I have asked about scripts to pull out date from Active Directory and how to export Windows Firewall rules. It is not that I can't write the script myself, but it is much faster with ChatGPT. Often I use AI to write like the main idea for my script and then I make some small adjustments myself. Go ahead and see how fast and easy it is. 
Read more

Hyper-V PowerShell Commands

-
Image
If you are running Hyper-V virtual machine you might find this post interesting. There is plenty of PowerShell Cmdlets for managing a Hyper-v environments. Hyper-V Cmdlets In this post I will cover some of the most simple Cmd-Lets you can use to manage your Hyper-V environments. Get-VM: Shows a list of Virtual machines running on your server, with current state and Uptime. Start-VM: Start a given Virtual machine from PowerShell. Stop-VM: Shutdown or turn off a selected VM Save-VM: Save the state of the virtual machine Checkpoint-VM: Creates a Checkpoint for a given VM that you can restore to, if something goes wrong.  Get-VMSnapshot: Get a list of snapshots for given VM. Get-VM In the example below we use Get-VM to get a list of all the Virtual machines running on this server and the current state of these machines: Start-VM In the example below I start the Virtual machine named "Windows 11: Stop-VM In the example below I stop the virtual machine named "Windows 11"...
Read more