Browse by Tags

Tagged Content List
  • Blog Post: Understanding XML and XPath

    Summary : Microsoft Scripting Guy, Ed Wilson, explores XML and XPath . Microsoft Scripting Guy, Ed Wilson, is here. One of the things that confused me for a long time about using the Get-WinEvent cmdlet is the difference between the –FilterXPath parameter and the –FilterXml parameters...
  • Blog Post: Using PowerShell to Parse System Log for Windows Updates

    Summary : Learn how to use XML and Windows PowerShell to parse the Windows system event log for Windows updates. Microsoft Scripting Guy, Ed Wilson, is here. Sometimes I come up with a solution, and then I go looking for a problem to fix. Not often, but sometimes. This is usually the result of playing...
  • Blog Post: Data Mine the Windows Event Log by Using PowerShell and XML

    Summary : Microsoft Scripting Guy, Ed Wilson, talks about using Get-WinEvent in Windows PowerShell with FilterXML to parse event logs. Microsoft Scripting Guy, Ed Wilson, is here. Today I am sipping a cup of English Breakfast tea. In my pot, I decided to add a bit of spearmint, peppermint, licorice...
  • Blog Post: Use FilterHashTable to Filter Event Log with PowerShell

    Summary : Microsoft Scripting Guy, Ed Wilson, talks about using a filter hash table to filter the event log with Windows PowerShell. Microsoft Scripting Guy, Ed Wilson, is here. The weather here in Charlotte, North Carolina has turned hot and humid. As a result, the Scripting Wife decided to migrate...
  • Blog Post: Use PowerShell to Troubleshoot Defrag Issues

    Summary : Microsoft Scripting Guy, Ed Wilson, talks about using Windows PowerShell to troubleshoot defrag issues in Windows 8.1. Microsoft Scripting Guy, Ed Wilson, is here. This week, I begin a week-long series about looking at the Windows event and diagnostic logs via Windows PowerShell. I have...
  • Blog Post: The 2011 Scripting Games Advanced Event 3: Use PowerShell to Query Classic Event and ETL Diagnostic Logs

    Summary : Advanced Event 3 of the 2011 Scripting Games uses Windows PowerShell to query class event and ETL diagnostic logs. About this event Division Advanced Date of Event 4/6/2011 12:15 AM Due Date 4/13/2011 12:15 AM ...
  • Blog Post: PowerTip: Find All Events from All Logs Related to PowerShell

    Summary: Learn how to use the Get-WinEvent cmdlet to return all events from all logs related to Windows PowerShell. How can I easily find events from all the event logs—both standard and the ETW logs that are related to Windows PowerShell? Use the Get-WinEvent cmdlet and use a wild card pattern...
  • Blog Post: How Can I Monitor the Event Logs for the Occurrence of a Specific Event?

    Hey, Scripting Guy! How can I monitor the event logs for the occurrence of a specific event? -- JP Hey, JP. Why, you use an event log monitoring script, of course. (Yes, it’s hard to believe, but they really do pay us to come up with brilliant answers like that.) OK, maybe we should be a little...
  • Blog Post: Use PowerShell to Clear All Logs

    Summary : Learn how to use Windows PowerShell to check disk space used by logs, and to clear those logs to reclaim space. Microsoft Scripting Guy Ed Wilson here. One of the things I found as I was researching ways to enable and to disable the ETW trace logs is that a seemingly large number of people...
  • Blog Post: How Can I Retrieve Information About the Latest Event Added to an Event Log?

    Hey, Scripting Guy! How can I retrieve information about the latest event added to an event log? -- HG Hey, HG. You know, it seems like only yesterday that someone was asking us how they could find the oldest event in an event log. And we remember how we told them that - oh, right: it was only yesterday...
  • Blog Post: Hey, Scripting Guy! How Can I Check My Event Logs to See Why My Computer Isn't Performing Well?

    Hey, Scripting Guy! I am trying to chase down a problem I have on my computer. Every so often, it just quits responding. I think it may be trying to talk to Elvis or commune with E.T. Perhaps if I point my finger and say, "E.T. gone home" in a raspy drone-like voice it would cease and desist all illogical...
  • Blog Post: How Can I Monitor Event Log Messages for Specific Words?

    Hey, Scripting Guy! How can I monitor event log messages for a specific word or phrase? -- GH Hey, GH. You know, now that the 2007 Scripting Games are over (have we mentioned that the 2008 Games are just a year away?) it’s time for the Scripting Guys to rejoin the real world. Before we answer your...
  • Blog Post: Use PowerShell to See Time Zone Information on Remote Computers

    Summary : Learn how to use a Windows PowerShell cmdlet to determine if the time zone on remote servers has been changed from the default. Microsoft Scripting Guy, Ed Wilson, is here. One of the cool things about the Scripting Wife is that from time to time I can ask her if she would like to help with...
  • Blog Post: PowerTip: Discover All Event Logs on a Server

    Summary : Discover all of the event logs on a server by using Windows PowerShell. How can I discover the event logs that are available on my server? There two ways to do this. If you want the classic-type event logs, use: Get-EventLog –List If you want to see all of the event logs...
  • Blog Post: Use PowerShell to Find Windows 8 Modern App Updates

    Summary: Microsoft Scripting Guy, Ed Wilson, talks about using Windows PowerShell to find information about Windows 8 Modern App updates. Hey, Scripting Guy! I love my Windows 8 laptop, and I also love my Windows RT Surface. One of the things that is a bit annoying is that it seems every time I turn...
  • Blog Post: Use PowerShell and a Filter Hash Table to Speed Boot Trace

    Summary : Microsoft Scripting Guy, Ed Wilson, talks about using a filter hash table with Windows PowerShell to speed up boot trace parsing. Hey, Scripting Guy! I don’t get it. You wrote a script yesterday, and said that the performance was bad. You suggested that you could improve the performance...
  • Blog Post: How Can I Backup an Event Log to a Text File?

    Hey, Scripting Guy! How can I backup an event log to a text file? -- IMBDS Hey, IMBDS. You know, the Scripting Guys have dedicated their lives to helping others. (Well, OK, originally we dedicated our lives to having others help us . But when no one seemed very interested in that we changed our minds...
  • Blog Post: Use PowerShell to Troubleshoot Windows

    Summary : Learn how to use Windows PowerShell to troubleshoot Windows by working with ETW logs. Weekend Scripter: Troubleshooting Windows Microsoft Scripting Guy Ed Wilson here. I do not know about you, but I enjoy troubleshooting Microsoft Windows. There is something rewarding about seeing...
  • Blog Post: Expert Solutions: Advanced Event 1 of the 2010 Scripting Games

    ( Note : These solutions were written for Advanced Event 1 of the 2010 Scripting Games .) Advanced Event 1 (Windows PowerShell) Kirk Munro, the world's first self-proclaimed Poshoholic , is a Microsoft MVP and Windows PowerShell Solutions Architect who has worked in the IT industry for more...
  • Blog Post: Use PowerShell to Create and to Use a New Event Log

    Summary: Microsoft Scripting Guy, Ed Wilson, talks about using Windows PowerShell to create and to use a new event log. Microsoft Scripting Guy, Ed Wilson, is here. Well, it’s the weekend, baby! At least for the Scripting Wife and me. You see, the Scripting Manager gave me today and Monday off...
  • Blog Post: Use Date Types to Filter Event Trace Logs in PowerShell

    Summary : Learn how to use date types to filter event trace logs in Windows PowerShell. Hey, Scripting Guy! I am wondering, oh great scripting master: can I use Windows PowerShell to parse an ETW log file? —JM Hello JM, Microsoft Scripting Guy Ed Wilson here. It is “oh dark...
  • Blog Post: Hey, Scripting Guy! The Scripting Wife Uses Windows PowerShell to Read from the Windows Event Log

    This week we are following the Scripting Wife as she pushes ahead with her preparations for the 2010 Scripting Games . You can catch up with her progress by reviewing the articles in the archive . Microsoft Scripting Guy Ed Wilson here. The wind is blowing with a steady stream that knocks the flowers...
  • Blog Post: 2010 Scripting Games: Advanced Event 2--Retrieving Workstation Start Time

    Note : We are no longer accepting entries for this event. See the due dates page for a list of all event due dates. About This Event Division Advanced Date of Event April 27, 2010 Due Date May 4, 2010 Event Scenario You need to retrieve...
  • Blog Post: Weekend Scripter: Use PowerShell to Get Startup Event Log Entries

    Summary : Microsoft Scripting Guy, Ed Wilson, talks about using Windows PowerShell to query event logs for entries created during startup. Microsoft Scripting Guy, Ed Wilson, is here. One of the things that annoys me is when something changes on my laptop, and I know that I did not do anything to...
  • Blog Post: How Can I Return Only the Last Record Written to an Event Log?

    Hey, Scripting Guy! How can I read only the last record written to an event log? In other words, what is the WMI equivalent to the SQL statement Select Top 1 ? -- KM Hey, KM. Well, as it turns out WMI doesn’t have an equivalent to the Select Top command; for better or worse, the WMI Query Language...