Get-SMServerEvent
Get-SMServerEvent
Gets the details of events generated in one or more event logs by log file name or event query.
Syntax
Parameter Set: GetServerEventDetail5
Get-SMServerEvent [-AsJob] [-BatchSize <UInt32> ] [-CimSession <CimSession[]> ] [-EndTime <UInt64[]> ] [-Level <EventLevelFlag[]> ] [-Log <String[]> ] [-QueryFile <String[]> ] [-QueryFileId <Int32[]> ] [-StartTime <UInt64[]> ] [-ThrottleLimit <Int32> ] [ <CommonParameters>]
Detailed Description
The Get-SMServerEvent cmdlet gets the details of events in one or more event logs by log file name or event query. Windows Server generates log entries for application, security, system, setup, and forwarded events.
Parameters
-AsJob
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-BatchSize<UInt32>
Specifies the batch size that the command uses to stream results. If you do not specify a value, the command defaults to 256.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-CimSession<CimSession[]>
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0
is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-EndTime<UInt64[]>
Specifies an array of end times.The command omits events that occur after the EndTime.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-Level<EventLevelFlag[]>
Specifies an array of EventLevelFlags that determines which events to return.
The event level flag values and names are:
--Value=1 Name=Critical
--Value=2 Name=Error
--Value=4 Name=Warning
--Value=8 Name=Informational
--Value=16 Name=All
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
true (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Log<String[]>
Specifies an array of log files.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
true (ByPropertyName) |
Accept Wildcard Characters? |
false |
-QueryFile<String[]>
Specifies an array of query file names.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
true (ByPropertyName) |
Accept Wildcard Characters? |
false |
-QueryFileId<Int32[]>
Specifies an array of query file IDs.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
true (ByPropertyName) |
Accept Wildcard Characters? |
false |
-StartTime<UInt64[]>
Specifies an array of start times for events. The command omits events that occur before the StartTime
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-ThrottleLimit<Int32>
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0
is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
<CommonParameters>
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
Inputs
The input type is the type of the objects that you can pipe to the cmdlet.
Outputs
The output type is the type of the objects that the cmdlet emits.
- Microsoft.Management.Infrastructure.CimInstance#MSFT_ServerEventDetail[]
Examples
Example 1:Get server events
This command gets the critical, error, and warning events in the application log, and specifies a throttle limit value of 16.
PS C:\> Get-SMServerEvent -Level @(7)-Log @(‘Application’) -ThrottleLimit 16