Welcome to TechNet Blogs Sign in | Join | Help

Browse by Tags

All Tags » event logs   (RSS)

Hey, Scripting Guy! Quick-Hits Friday: The Scripting Guys Respond to a Bunch of Questions (05/22/09)

How Can I Determine if a Particular Windows Feature Is Installed? Hey, Scripting Guy! I am new to Windows PowerShell scripting and have a little experience with WMI thanks to your Windows PowerShell Scriptomatic tool. I'm trying to determine whether a

Hey, Scripting Guy! How Can I Check My Event Logs to See Why My Computer Isn't Performing Well?

Hey, Scripting Guy! I am trying to chase down a problem I have on my computer. Every so often, it just quits responding. I think it may be trying to talk to Elvis or commune with E.T. Perhaps if I point my finger and say, "E.T. gone home" in a raspy drone-like

Hey, Scripting Guy! How Can I Check the Size of My Event Log and Then Backup and Archive It If It Is More Than Half Full?

Hey, Scripting Guy! We have recently enabled additional security auditing on our network, and I do not want to increase the size of those logs due to the fact that they are already huge. I do not want to turn on circular logging because I need to keep

Hey, Scripting Guy! How Can I Query Event Logs to Discover Active Directory Information?

Hey, Scripting Guy! We have this problem at work. I keep finding groups in Active Directory, and I do not know why they were created or by whom. I am wondering if there is some way to search Active Directory to see who created a group. Is there an owner

Hey, Scripting Guy! How Can I Check My Event Logs?

Hey, Scripting Guy! When I received my Microsoft Certified Systems Engineer (MCSE) certification several years ago, I remember the instructor jumping up and down and telling us that we were not doing our job if we do not check the event logs on a daily

Hey, Scripting Guy! How Can I Retrieve a List of Unique Users from the Security Event Log?

Hey, Scripting Guy! How can I retrieve a list of unique users from the Security event log? -- KM Hey, KM. Before we tackle your question we should probably address a question sent in by another reader: Hey, Scripting Guy! Whatever happened to Monday?

How Can I Retrieve Information About the Latest Event Added to an Event Log?

Hey, Scripting Guy! How can I retrieve information about the latest event added to an event log? -- HG Hey, HG. You know, it seems like only yesterday that someone was asking us how they could find the oldest event in an event log. And we remember how

How Can I Find the Date of the Oldest Event in an Event Log?

Hey, Scripting Guy! How can I find the date of the oldest event in an event log? -- JL Hey, JL. You know, you just had to make a reference to “old” in your question, didn’t you? Just today one of the Scripting Guys received a letter from the American

How Can I Retrieve Just Audit Failures, Warnings, and Errors from My Event Logs?

Hey, Scripting Guy! How can I retrieve just audit failures, warnings, and errors from my event logs? -- OG Hey, OG. You know, just for the heck of it, we decided to check the event logs on one of our computers to see whether this was a task worth doing.

How Can I Monitor the Event Logs for the Occurrence of a Specific Event?

Hey, Scripting Guy! How can I monitor the event logs for the occurrence of a specific event? -- JP Hey, JP. Why, you use an event log monitoring script, of course. (Yes, it’s hard to believe, but they really do pay us to come up with brilliant answers

How Can I Retrieve Information From My Event Logs Regarding Unsuccessful Logons?

Hey, Scripting Guy! How can I scan the event logs of my servers and return only information about unsuccessful logons? -- LC Hey, LC. We’ll assume that you have enabled security auditing on your servers. If you haven’t, that’s step one. What you’ll want

How Can I Return Only the Last Record Written to an Event Log?

Hey, Scripting Guy! How can I read only the last record written to an event log? In other words, what is the WMI equivalent to the SQL statement Select Top 1 ? -- KM Hey, KM. Well, as it turns out WMI doesn’t have an equivalent to the Select Top command;
 
Page view tracker