Get-SMServerEvent

[アーティクル]
11/16/2015

Get-SMServerEvent

Gets the details of events generated in one or more event logs by log file name or event query.

Syntax

Parameter Set: GetServerEventDetail5
Get-SMServerEvent [-AsJob] [-BatchSize <UInt32> ] [-CimSession <CimSession[]> ] [-EndTime <UInt64[]> ] [-Level <EventLevelFlag[]> ] [-Log <String[]> ] [-QueryFile <String[]> ] [-QueryFileId <Int32[]> ] [-StartTime <UInt64[]> ] [-ThrottleLimit <Int32> ] [ <CommonParameters>]

Detailed Description

The Get-SMServerEvent cmdlet gets the details of events in one or more event logs by log file name or event query. Windows Server generates log entries for application, security, system, setup, and forwarded events.

Parameters

-AsJob

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-BatchSize<UInt32>

Specifies the batch size that the command uses to stream results. If you do not specify a value, the command defaults to 256.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-CimSession<CimSession[]>

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-EndTime<UInt64[]>

Specifies an array of end times.The command omits events that occur after the EndTime.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-Level<EventLevelFlag[]>

Specifies an array of EventLevelFlags that determines which events to return.

The event level flag values and names are:

--Value=1 Name=Critical

--Value=2 Name=Error

--Value=4 Name=Warning

--Value=8 Name=Informational

--Value=16 Name=All

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	true (ByPropertyName)
Accept Wildcard Characters?	false

-Log<String[]>

Specifies an array of log files.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	true (ByPropertyName)
Accept Wildcard Characters?	false

-QueryFile<String[]>

Specifies an array of query file names.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	true (ByPropertyName)
Accept Wildcard Characters?	false

-QueryFileId<Int32[]>

Specifies an array of query file IDs.

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	true (ByPropertyName)
Accept Wildcard Characters?	false

-StartTime<UInt64[]>

Specifies an array of start times for events. The command omits events that occur before the StartTime

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

-ThrottleLimit<Int32>

Aliases	none
Required?	false
Position?	named
Default Value	none
Accept Pipeline Input?	false
Accept Wildcard Characters?	false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

Outputs

The output type is the type of the objects that the cmdlet emits.

Microsoft.Management.Infrastructure.CimInstance#MSFT_ServerEventDetail[]

Examples

Example 1:Get server events

This command gets the critical, error, and warning events in the application log, and specifies a throttle limit value of 16.

PS C:\> Get-SMServerEvent -Level @(7)-Log @(‘Application’) -ThrottleLimit 16

Get-SMServerEvent