Advertisement
pepoluan

Get-EventLog and filters out non-interesting EventID's

Jul 11th, 2013
76
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. $System_Ignores =@(
  2.   @{ Source_1 = 1111 },  # You can put a remark here
  3.   @{ Source_2 = 3 },     # And here
  4.   @{ "*" = 4 }           # Asterisk ignores Log source
  5.   # Don't forget: Last element above must not have trailing comma!
  6.   )
  7.  
  8. $SystemLog = get-eventlog system -after $Date -EntryType Error,Warning
  9.  
  10. ForEach ($i in $System_Ignores) {
  11.   If ($i.Name -ne "*") {
  12.     $SystemLog = $SystemLog | Where { $_.Source -ne $i.Name -and $_.EventID -ne $i.Value }
  13.     }
  14.   Else {
  15.     $SystemLog = $SystemLog | Where { $_.EventID -ne $i.Value }
  16.     }
  17.   }
  18.  
  19. $System = ($SystemLog | select Entrytype, Source, EventID, Message, TimeGenerated | format-list)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement