re: Trigger a PowerShell Script from a Windows Event

Jeffrey S. Patton — Wed, 21 Mar 2012 18:18:46 GMT

First off, AWESOME! I've been looking for a way to pass information from an event to a triggered script! This has saved me alot of time and effort.

That said, I did have a few issues, the script as presented didn't work for me. I don't know what the difference would be, but for the record I'm running Windows 7 Enterprise x64 with Powershell 2.0

The method that you used to cast eventparams as an xml didn't work for me, so I changed that. This caused me to change how your if statement functioned as well. I also coudln't get my output to display ina popup, but since I want this stored in a file that didn't matter to me. So here is the modified lower half of the script. I'll most likely clean this up and make it look how most of my scripts look, but for the time being I know this works quite well.

$eventParams = ([xml]$event.ToXml())

if ($eventParams.Event.System.TimeCreated.SystemTime) {

$XMLEvent.event.eventdata.data |Select-Object -Property @{Label='EventField';Expression="Name"}, @{Label='EventData';Expression="#text"} |ConvertTo-Csv -NoTypeInformation |Out-File U:\Home\Desktop\appusage.csv -Append

}

Thanks so much!