[新手上路]批处理新手入门导读[视频教程]批处理基础视频教程[视频教程]VBS基础视频教程[批处理精品]批处理版照片整理器
[批处理精品]纯批处理备份&还原驱动[批处理精品]CMD命令50条不能说的秘密[在线下载]第三方命令行工具[在线帮助]VBScript / JScript 在线参考
返回列表 发帖

[转载代码] [PowerShell每日技巧]根据日期时间查看事件日志(20140309)

Often, you might want to browse all system events around a given date. Let's say a machine crashed at 08:47, and you'd like to see all events +/? 2 minutes around that time.

Here is a script that does It for you:
  1. $deltaminutes = 2
  2. $delta = New-TimeSpan -Minutes $deltaminutes
  3. $time = Read-Host -Prompt 'Enter time of event (yyyy-MM-dd HH:mm:ss or HH:mm)'
  4. $datetime = Get-Date -Date $time
  5. $start = $datetime - $delta
  6. $end = $datetime + $delta
  7. $result = @(Get-EventLog -LogName System -Before $end -After $start)
  8. $result += Get-EventLog -LogName Application -Before $end -After $start
  9. $result | Sort-Object -Property TimeGenerated -Descending |
  10.   Out-GridView -Title "Events +/? $deltaminutes minutes around $datetime"
复制代码
When you run it, it asks for a time or a date and time. Next, you get back all events that occurred within 2 minutes before and after in the system and application log.

http://powershell.com/cs/blogs/tips/archive/2014/03/09/finding-events-around-a-date.aspx

返回列表