2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

Scott Alvarino Your Miami Tech Guy — Sun, 29 Apr 2012 15:26:45 GMT

Hi Ed, is (Microsoft-Windows-WMI-Activity/Trace) considered a hidden log? (I believe it is) I have tested several scripts with this log enabled and with records in them and it doesn't appear because people use the (.recordcount) property to be more than 0 but this log doesn't have a recordcount amount even if it has entries. Even in the Expert Script submitted it doesn't pick up this log because it doesn't have a recordcount amount it just is empty. Am I wrong that (Microsoft-Windows-WMI-Activity/Trace) is supposed to be returned as well I made sure I have it enabled?

thanks for everything Ed.

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

IamMred — Wed, 18 Apr 2012 20:47:00 GMT

@Ratty67 I hate to see you go. This skill is essential for IT Pros on a day to day basis. You can download an eval copy of Windows 7 here technet.microsoft.com/.../cc442495

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

ratty67 — Wed, 18 Apr 2012 20:27:11 GMT

This is where I dropped out of the games. Believe it or not - not everyone has access to a Win7 machine :(

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

Zak Humphries — Tue, 17 Apr 2012 08:23:51 GMT

DOH!! Clicked submit and realized I had left a Measure-Object for debugging at the end of my line..... 1 star :(

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

IamMred — Thu, 12 Apr 2012 17:24:35 GMT

@Daniel-D a onelinner is acceptable, and it is permissible to use aliases in the one linner. If you want to make DOUBLE SURE then include a comment with the "long version" of your command.

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

Daniel-D — Thu, 12 Apr 2012 16:30:34 GMT

Thanks for your answer on my previous question. Have another one for you: Given the "one-liner" design point, are you implying that aliases are acceptable, or will points be deducted if aliases are used since you did not state that they are explicitly acceptable?

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

IamMred — Thu, 12 Apr 2012 16:08:14 GMT

@Get-Exchange No, I am not checking for remote connectivity on this event. Do not return errors from the command.

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

IamMred — Thu, 12 Apr 2012 15:59:43 GMT

@Daniel-D you want logs that are enabled AND have a record entry count that is greater than 0. If there is an enabled log with NO entries in it, then do not display that log.

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

IamMred — Thu, 12 Apr 2012 15:55:34 GMT

@Brad you probably want to add a bit of code to supress the errors. I am not looking for structured error handling, but just something so you get a clean output.

re: 2012 Scripting Games Beginner Event 7: Display a List of Enabled Logs

Daniel-D — Thu, 12 Apr 2012 15:46:36 GMT

Regarding the following points (below), I see two possible ways to filter (Enabled AND Count > 0) vs (Enabled OR Count > 0). To me, the event scenario leans toward the first ("logs actively record"), but inorder to display all logs with entries, the later would be needed. Does the "enabled only" design point take presidence over the "all logs with entries"? Mr Ed, would you clarify?

* Your code should display all logs that have entries in them.

* Your code should display only logs that are enabled.

Thanks!