Results 1 to 5 of 5

Thread: Access from command line using the PowerShell

  1. #1
    Join Date
    Sep 2010
    Posts
    19

    Access from command line using the PowerShell

    I am really tired of reading the event log files using scripts and can evaluate, to embark on several paths. Many administrators are expected to know a special tool from Microsoft, have been for some time is available: the log parser. Now I am eager to know know about it. So please tell me how can I access from command line using the PowerShell? Along with that it would be better if you provide some information about the log files. I am expecting that someone out there will be kind and help me as soon as possible.

  2. #2
    Join Date
    Dec 2008
    Posts
    202

    Re: Access from command line using the PowerShell

    The advantage of this approach is that it will find a log file using a SQL-like syntax can process. However, syntax and capabilities of this software is as comprehensive and thus correspondingly complex that a more accurate description would be the extent of their deployment. All system administrators who rely on this software, but should always remember that it has experienced since 2005, no update. Therefore, it is certainly far more sense to work with PowerShell. It offers the Get-Eventlog a very good way to access the data. Was it to Windows Server 2008 is not possible to extend them to the core systems of Windows Server installations without graphical interface) to use (so this limitation since the availability of the R2 version of Windows Server repealed 2008: With the current PowerShell 2.0, the corresponding scripts can now also run on this platform - a key advantage for administrators.

  3. #3
    Join Date
    Dec 2008
    Posts
    161

    Re: Access from command line using the PowerShell

    A quick and feasible way to provide filtering capabilities, you can use at this point, the number of displayed data to determine a log file to be significantly reduced. These filters were already on Windows Server 2003 and can 2008 in the same way used to be servers. These only provide a momentary "View" on the data available and are therefore not permanent. The system will offer but the possibility of a custom view in an XML file to store, then later imported back into the Event Viewer and can be applied to the data. If you want to use a filter on a Windows Server 2008, you must perform the following steps:
    1. Open, as described above, the Event Viewer.
    2. Select from the log, you want to filter. You can either click on the appropriate entry in the Actions pane of the MMC or by right-clicking on the Log from the context menu, select Filter Current Log ....
    3. A window "Filter Current Log" will open. Here you now have a whole range of options available, how to filter them. You can for example choose only the events that occurred within the last twelve hours on the system.
    4. Furthermore, you have open at this point the opportunity to search for the different event sources, or by word or users or systems. You can also search here for a very specific event ID.

  4. #4
    Join Date
    Mar 2008
    Posts
    192

    Re: Access from command line using the PowerShell

    Before you start, use this PowerShell commands to examine the various log files, you should still play an important instructions: All cmdlets, which include in their name, the noun "EventLog", can only work with the classic format of the event logs they are not able to process the extensions of the new EXVT format. This includes the following commands:
    • Clear event log,
    • Limit event log,
    • New event log,
    • RemoveEventlog,
    • ShowEventlog and
    • WriteEventlog.
    With these commands, you can of course also on Windows Server 2008 R2 or Windows 7, the "classic" event, such as system files, applications and security access. If you are going to many special log files, and newer features to access, so you should use the cmdlet Get-WinEvent use. It requires the use of Windows Vista , Windows Server 2008 R2 or later. In addition, the Microsoft .NET Framework version 3.5 or higher.

  5. #5
    Join Date
    Feb 2010
    Posts
    181

    Re: Access from command line using the PowerShell

    A simple call this command in the following form will then display all the event logs that you can read on the system with its help:
    Get-WinEvent -listlog *
    It is a pretty long list, as on a current Windows - Server easily more than 100 protocols. As shown in our example, causes the metacharacter "*" after the parameter listlog ordered to list all of them on the current system using existing protocols. Do you want to display only certain log files, the modification is achieved by the command just as easy:
    Get-WinEvent -listlog *Security*
    This command will display all log files on their behalf to any point of the "security" is found. Let other hand, the parameter listlog away, so you will list the actual events in the security log:
    Get-WinEvent Security
    Also during this call there are again many, many events that are displayed on the PowerShell on the screen. Since it is definitely far better, appropriate restrictions directly mitzugeben when calling the cmdlet. Type:
    Get-WinEvent Security -MaxEvents 5

Similar Threads

  1. How to access c drive through command line?
    By Laiman in forum Windows Software
    Replies: 4
    Last Post: 16-03-2011, 08:03 PM
  2. xcopy command line together with wmplayer command line
    By Aislinn in forum Operating Systems
    Replies: 5
    Last Post: 31-03-2010, 12:13 PM
  3. Access Command line in MAC
    By Enriquee in forum Windows Software
    Replies: 3
    Last Post: 19-11-2009, 01:38 AM
  4. Powershell 'Get-Mailbox' command
    By Bracken in forum Software Development
    Replies: 3
    Last Post: 03-06-2009, 07:04 PM
  5. Access Control panel Applet via command line
    By Kraker999 in forum Operating Systems
    Replies: 2
    Last Post: 28-02-2009, 05:49 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •