Powershell - Obter os logs de eventos do Windows

Por -
Como obter os logs de eventos do Windows através do Powershell

# Para obter os últimos 50 eventos do log
Get-EventLog -LogName Application -Newest 50

# Para obter os logs das últimas 24 horas
Get-EventLog Application -After (Get-Date).AddDays(-1)

# Para obter os logs das últimas 2 horas
Get-EventLog Application -After (Get-Date).AddHours(-2)

# Para filtrar o log por um serviços específico
Get-EventLog -LogName Application -Newest 50 | where {$_.Source -like "*aaaa*"}

 # Para enviar os logs para um arquivo html
Get-EventLog -LogName Application -Newest 50 | ConvertTo-Html | Out-File C:\Temp\EventViewerLog.html

Comentários

Postar um comentário

Postagens mais visitadas deste blog

Cisco router password recovery

Por -
1) Press Break on the terminal keyboard a couple of times after you see the message program load complete, entry point: 0x80008000, size: 0x6fdb4c in order to put the router into ROMMON. 2) Type confreg 0x2142 at the rommon 1> prompt in order to boot from Flash. This step bypasses the startup configuration where the passwords are stored. 3)  Type reset at the rommon 2> prompt. The router reboots, but ignores the saved configuration. 4)  Type no after each setup question, or press Ctrl-C in order to skip the initial setup procedure. 5)  Type enable at the Router> prompt. You are in enable mode and should see the Router# prompt. 6)  Type   configure memory   or copy startup-config running-config in order to copy the nonvolatile RAM (NVRAM) into memory. 7)  Type show running-config. The passwords (enable password, enable secret, vty, and console passwords) are in either an encrypted or encrypted format. You can reuse ir change. 8)  Type configure terminal. The hostname (conf
Leia mais