10 most recent CRITICAL alerts (not closed) get-alert | where {$_.severity -eq "error" -and $_.resolutionstate -ne 255} | sort-object TimeRaised -desc | select-object -first 10 name,timeraised main menu

Top 10 alerts get-alert | Group-Object Name | Sort-object Count -desc | select-Object -first 10 Count, Name | ft –auto main menu

Count all alerts, group by date $array = @();foreach ($date in Get-Alert | foreach-object {$_.get_TimeRaised().ToLocalTime().toShortDateString()}) {$array += $date};$array | Group-Object | select-object count,@{name="Date";expression={foreach...

Count alerts raised in date range get-alert | where {$_.TimeRaised.ToLocalTime().date -ge " mm/dd/yyyy " -and $_.TimeRaised.ToLocalTime().date -le " mm/dd/yyyy "} main menu

Count alerts raised on specific date get-alert | where {$_.TimeRaised.ToLocalTime().date -eq " mm/dd/yyyy "} | measure-object main menu

Closed alert count get-alert -criteria "ResolutionState = 255" | measure-object main menu

Open alert count (all resolution states, except new and closed) $states = 2..254;get-alert | where {$states -contains $_.resolutionState} | measure-object main menu

New alert count get-alert -criteria "ResolutionState = 0" | measure-object main menu

Resolve UIGeneratedMonitor to a Monitor Name get-monitor | where {$_.name -eq " UIGeneratedMonitor "} | select DisplayName main menu

Which Management Pack contains this Monitor? (get-monitor | where {$_.displayname -eq " monitor "}).getManagementPack() | ft DisplayName,Name –auto main menu

Resolve UIGeneratedRule to a Rule Name get-rule | where {$_.name -eq " UIGeneratedRule "} | select DisplayName main menu

Find collection rule that is writing specific performance object to the database Foreach ($rule in (get-rule | where {$_.category -eq "PerformanceCollection"} | foreach-object {$_.DataSourceCollection}))     {    ...

Returns the Management Pack which contains specific rule. (get-rule | where {$_.displayname -eq " rule name "}).getManagementPack() | ft DisplayName,Name –auto main menu

Get group members and contained instance state, by group name foreach ($group in get-monitoringobjectGroup) {if($group.DisplayName -eq " group_name ") {$group.GetRelatedMonitoringObjects() | ft DisplayName,HealthState}} main menu

Get agent state (Windows Computer Instance) get-agent | where {$_.computername -eq " netbios_name "} | ft name,HealthState main menu

$query = New-LdapQueryDiscoveryCriteria -domain domain -ldapquery "(cn= target_netbios_name )" $discoverycfg = New-WindowsDiscoveryConfiguration -ldapquery $query $discoveryResults = Start-Discovery -managementServer (get-managementServer) ...

Approve Manual Installation for single agent Get-AgentPendingAction | where {$_.AgentName –match “ netbios_name ”} | Approve-AgentPendingAction Approve Manual Installation for all pending agents Get-AgentPendingAction | where {$_.AgentPendingActionType...

Evaluate whether alert grooming is working.  No result is good. $Threshold=(Get-Date).AddDays(-(get-defaultsetting)[42].Value-1).ToUniversalTime().Date.AddMinutes(30);Get-Alert | Where {$_.TimeResolved -and $_.TimeResolved -lt $Threshold} | Measure...

Beware of word wrap. foreach ($rule in get-rule | where {$_.category -eq "EventCollection"} | foreach-object {$_.DataSourceCollection})     {     if ($rule.get_configuration().ToString() -match " event number...