Get-SMServerEvent

Get-SMServerEvent

Gets the details of events generated in one or more event logs by log file name or event query.

Syntax

Parameter Set: GetServerEventDetail5
Get-SMServerEvent [-AsJob] [-BatchSize <UInt32> ] [-CimSession <CimSession[]> ] [-EndTime <UInt64[]> ] [-Level <EventLevelFlag[]> ] [-Log <String[]> ] [-QueryFile <String[]> ] [-QueryFileId <Int32[]> ] [-StartTime <UInt64[]> ] [-ThrottleLimit <Int32> ] [ <CommonParameters>]




Detailed Description

The Get-SMServerEvent cmdlet gets the details of events in one or more event logs by log file name or event query. Windows Server generates log entries for application, security, system, setup, and forwarded events.

Parameters

-AsJob

Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-BatchSize<UInt32>

Specifies the batch size that the command uses to stream results. If you do not specify a value, the command defaults to 256.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-CimSession<CimSession[]>

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-EndTime<UInt64[]>

Specifies an array of end times.The command omits events that occur after the EndTime.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-Level<EventLevelFlag[]>

Specifies an array of EventLevelFlags that determines which events to return.

The event level flag values and names are:

--Value=1 Name=Critical

--Value=2 Name=Error

--Value=4 Name=Warning

--Value=8 Name=Informational

--Value=16 Name=All


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

true (ByPropertyName)

Accept Wildcard Characters?

false

-Log<String[]>

Specifies an array of log files.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

true (ByPropertyName)

Accept Wildcard Characters?

false

-QueryFile<String[]>

Specifies an array of query file names.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

true (ByPropertyName)

Accept Wildcard Characters?

false

-QueryFileId<Int32[]>

Specifies an array of query file IDs.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

true (ByPropertyName)

Accept Wildcard Characters?

false

-StartTime<UInt64[]>

Specifies an array of start times for events. The command omits events that occur before the StartTime


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-ThrottleLimit<Int32>

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.


Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (http://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

Outputs

The output type is the type of the objects that the cmdlet emits.

  • Microsoft.Management.Infrastructure.CimInstance#MSFT_ServerEventDetail[]

Examples

Example 1:Get server events

This command gets the critical, error, and warning events in the application log, and specifies a throttle limit value of 16.


PS C:\> Get-SMServerEvent -Level @(7)-Log @(‘Application’) -ThrottleLimit 16

Community Additions

ADD
Show: