{"id":107,"date":"2007-04-10T11:00:00","date_gmt":"2007-04-10T19:00:00","guid":{"rendered":"http:\/\/testblog.sapien.com\/index.php\/2007\/04\/10\/updated-event-log-check\/"},"modified":"2007-04-10T11:00:00","modified_gmt":"2007-04-10T19:00:00","slug":"updated-event-log-check","status":"publish","type":"post","link":"https:\/\/dev.sapien.com\/blog\/2007\/04\/10\/updated-event-log-check\/","title":{"rendered":"Updated Event Log Check"},"content":{"rendered":"

A few months ago, I wrote an entry<\/a> about using Powershell to look at recent event logs. Since then, I’ve decided to make a minor improvement. The new function lets you specify the number of event logs to retrieve:<\/p>\n

Function Show-Logs {
Param([int]$iEntries) <\/font><\/p>\n

#default for number of entries is 5
if ($iEntries -lt 1) {$iEntries=5} <\/font><\/p>\n

foreach ($log in (get-eventlog -list -asString)) {
   Write-Host $log -fore Green -back Black; Get-eventlog $log -newest $iEntries `
   |select TimeGenerated,EntryType,Source,EventID,Message | more
  }
}<\/font> <\/p>\n

I’ve added this function to my Powershell profile. The new syntax is Show-Logs [number-of-entries]. I’ve added code so that if you don’t specify the number of recent entries for each log, it will default to 5: <\/p>\n

if ($iEntries -lt 1) {$iEntries=5} <\/font><\/p>\n

Otherwise, the function will return the X number of recent event entries for each log file on your system.<\/p>\n

Technorati tags: <\/span>PowerShell<\/span><\/a>, <\/span>Functions<\/span><\/a>, <\/span>EventLogs<\/span><\/a>, <\/span>Scripting<\/span><\/a>, <\/span>Get-EventLog<\/span><\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

A few months ago, I wrote an entry about using Powershell to look at recent event logs. Since then, I’ve decided to make a minor improvement. The new function lets you specify the number of event logs to retrieve.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[25],"tags":[],"class_list":["post-107","post","type-post","status-publish","format-standard","hentry","category-windows-powershell"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t