header1   header
header
header Register : : Login header
header
connector   connector
menuleft menuright
submenu   submenu
left
Getting Eventlogs for a certain day
Last Post 29 Jan 2010 01:09 PM by mkadlec. 3 Replies.
Printer Friendly
  •  
  •  
  •  
  •  
  •  
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages Resolved
mkadlecUser is Offline
New Member
New Member
Posts:8
Avatar

--
28 Jan 2010 03:13 PM
    Here's a challenge question, I'm sure this can be done, the syntax is eluding me though.

    I'm trying to grab the latest event log for a particular day.

    My current syntax is as follows (throws an error on the convert, but you can see what I am trying to do):

    $event = get-eventlog -logname $logName -source mpkLogParser -newest 1 | where {$_.TimeWritten -lt ([datetime]::ParseExact($DateTimeStart, "YYYY-MM-dd HH:mm:ss", $null))}

    Any help would be appreciated,

    Mark.
    Shay LevyUser is Offline
    PowerShell MVP, Admin
    Veteran Member
    Veteran Member
    Posts:1362
    Avatar

    --
    28 Jan 2010 10:23 PM
    • Accepted Answer
    $date = (Get-Date '01/01/2010').Date
    Get-EventLog -LogName $logName -Source mpkLogParser | Where-Object {$_.TimeWritten.Date -eq $date } | Select-Object -First 1

    Shay Levy
    Windows PowerShell MVP
    http://PowerShay.com
    PowerShell Community Toolbar
    Twitter: @ShayLevy
    PoshoholicUser is Offline
    PowerShell MVP, Community Director
    Basic Member
    Basic Member
    Posts:111
    Avatar

    --
    29 Jan 2010 12:15 PM
    Here's a cleaner way using Get-EventLog in PowerShell 2.0:

    $date = Get-Date '01/22/2010'
    Get-EventLog -LogName $logName -Source mpkLogParser -After $date -Before $date.AddDays(1) -Newest 1
    Kirk Munro [MVP]
    Poshoholic

    My blog: http://poshoholic.com
    Follow me on Twitter: http://twitter.com/poshoholic
    mkadlecUser is Offline
    New Member
    New Member
    Posts:8
    Avatar

    --
    29 Jan 2010 01:09 PM
    Thanks guys, much better now!
    You are not authorized to post a reply.


    Active Forums 4.3
    right
    footer   footer
    footer Sponsored by Quest Software • SAPIEN Technologies • Compellent • Microsoft Windows Server 2008 R2 footer
    footer   footer