[PowerShell每日技巧]查看一天内的错误事件日志(20140312)

DAIC

Relative dates are important to get data within a special time frame, avoiding hard-coded dates and times.

This script will get all error and warning events from the System log since yesterday (24 hours ago):

1. $today = Get-Date
   
2. $1day = New-TimeSpan -Days 1
   
3. $yesterday = $today - $1day
   
4. Get-EventLog -LogName system -EntryType Error, Warning -After $yesterday

复制代码

http://powershell.com/cs/blogs/tips/archive/2014/03/12/finding-errors-since-yesterday.aspx

DAIC

For those looking for a one-liner alternative, you can use the AddDays method as shown in the following command to retrieve events for the last 24 hours.

1. Get-EventLog -LogName system -EntryType Error, Warning -After (Get-Date).AddDays(-1)

复制代码

To retrieve events from yesterday starting at midnight, use the Date method prior to AddDays.

1. Get-EventLog -LogName system -EntryType Error, Warning -After (Get-Date).Date.AddDays(-1)

复制代码

DAIC

I want to get all error and warning events from the System log since yesterday start of day.

1. $yesterday1200AM = ( [datetime](Get-Date).ToShortDateString()).adddays(-1)
   
2. $yesterday1200AM
   
3. Get-EventLog -LogName system -EntryType Error, Warning -After $yesterday1200AM

复制代码

522235677

C:\Users\Admin>powershell -file "C:\Users\Admin\Desktop\test.ps1"
无法加载文件 C:\Users\Admin\Desktop\test.ps1，因为在此系统中禁止执行脚本。有关
详细信息，请参阅 "get-help about_signing"。
    + CategoryInfo          : NotSpecified: ( [], ParentContainsErrorRecordE
   xception
    + FullyQualifiedErrorId : RuntimeException

DAIC

回复 4# 522235677

1. Set-ExecutionPolicy Unrestricted

复制代码

http://www.bathome.net/thread-26149-1-1.html