Edit

Get-SMServerEvent

  • Reference
Module:
ServerManagerTasks

Gets the details of events generated in one or more event logs by log file name or event query.

Syntax

Get-SMServerEvent
   [-AsJob]
   [-BatchSize <UInt32>]
   [-CimSession <CimSession[]>]
   [-EndTime <UInt64[]>]
   [-Level <EventLevelFlag[]>]
   [-Log <String[]>]
   [-QueryFile <String[]>]
   [-QueryFileId <Int32[]>]
   [-StartTime <UInt64[]>]
   [-ThrottleLimit <Int32>]

Description

The Get-SMServerEvent cmdlet gets the details of events in one or more event logs by log file name or event query. Windows Server generates log entries for application, security, system, setup, and forwarded events.

Examples

Example 1:Get server events

PS C:\>Get-SMServerEvent -Level @(7)-Log @('Application') -ThrottleLimit 16

This command gets the critical, error, and warning events in the application log, and specifies a throttle limit value of 16.

Parameters

-AsJob

ps_cimcommon_asjob

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-BatchSize

Specifies the batch size that the command uses to stream results. If you do not specify a value, the command defaults to 256.

Type:UInt32
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CimSession

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Type:CimSession[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EndTime

Specifies an array of end times.The command omits events that occur after the EndTime.

Type:UInt64[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Level

Specifies an array of EventLevelFlags that determines which events to return.

The event level flag values and names are:

--Value=1 Name=Critical

--Value=2 Name=Error 

--Value=4 Name=Warning 

--Value=8 Name=Informational 

--Value=16 Name=All
Type:EventLevelFlag[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Log

Specifies an array of log files.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-QueryFile

Specifies an array of query file names.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-QueryFileId

Specifies an array of query file IDs.

Type:Int32[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-StartTime

Specifies an array of start times for events. The command omits events that occur before the StartTime

Type:UInt64[]
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ThrottleLimit

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Type:Int32
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Outputs

CimInstance[]