Board logo

标题: [转载代码] [PowerShell每日技巧]根据日期时间查看事件日志(20140309) [打印本页]

作者: DAIC    时间: 2014-3-12 15:15     标题: [PowerShell每日技巧]根据日期时间查看事件日志(20140309)

Often, you might want to browse all system events around a given date. Let's say a machine crashed at 08:47, and you'd like to see all events +/? 2 minutes around that time.

Here is a script that does It for you:
  1. $deltaminutes = 2
  2. $delta = New-TimeSpan -Minutes $deltaminutes
  3. $time = Read-Host -Prompt 'Enter time of event (yyyy-MM-dd HH:mm:ss or HH:mm)'
  4. $datetime = Get-Date -Date $time
  5. $start = $datetime - $delta
  6. $end = $datetime + $delta
  7. $result = @(Get-EventLog -LogName System -Before $end -After $start)
  8. $result += Get-EventLog -LogName Application -Before $end -After $start
  9. $result | Sort-Object -Property TimeGenerated -Descending |
  10.   Out-GridView -Title "Events +/? $deltaminutes minutes around $datetime"
复制代码
When you run it, it asks for a time or a date and time. Next, you get back all events that occurred within 2 minutes before and after in the system and application log.

http://powershell.com/cs/blogs/tips/archive/2014/03/09/finding-events-around-a-date.aspx




欢迎光临 批处理之家 (http://bbs.bathome.net/) Powered by Discuz! 7.2