Why is my log Truncated for event log export

All replies

• 

  

  0

  Sign in to vote

  Change this:

  For ($count = 0; $count -lt $countarr;$count++)
  {
    write-host "`nCollecting" $eventlogs[$count] "Event Logs from Computer $s" -foregroundcolor yellow -backgroundcolor black
    $logs = get-eventlog -after $yesterday -logname $eventlogs[$count] -computername $s
    Write-host "Processing" -foregroundcolor yellow -backgroundcolor black

  To this:

  $filter = @{
      Logname = 'Application','System'
      StartTime = [datetime]::Today.AddDays(-1)
  }
  $logs = Get-Content $serverlistinput |
      ForEach-Object{
          Get-WinEvent -FilterHashTable $filter -computername $_
      }

  Remove this line from script:

  $ErrorActionPreference = "silentlycontinue"

  Get the output working without HTML then use "ConvertTo-Html" to create the HTML.

  I see you will need to learn a bit more about PowerShell and programming to understand how this is done in PowerShell.

  Look in Gallery for many scripts that do what you are trying to do.

  ---

  \_(ツ)_/

  
  

  • Edited by jrv Monday, August 13, 2018 8:14 PM

  Monday, August 13, 2018 5:11 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Thank you for quick reply. Ok since you can already see i am no master at powerhell now i have another issue with this code. I replaced what you told me and removed the other line but next line now has an error.

  
  Missing '=' operator after key in hash literal.
  At :78 char:12
  +   Foreach ( <<<< $l in $logs)
      + CategoryInfo          : ParserError: (:) [], ParseException
      + FullyQualifiedErrorId : MissingEqualsInHashLiteral

  Monday, August 13, 2018 7:32 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  You don't need the foreach.

  We do HTML like this:

  $filter = @{
      Logname = 'Application','System'
      StartTime = [datetime]::Today.AddDays(-1)
  }
  $html = Get-Content $serverlistinput |
      ForEach-Object{
          Get-WinEvent -FilterHashTable $filter -computername $_
      } |
      select TimeGenerated, Source, EntryType, Message |
      ConvertTo-Html

  
  

  See: http://tech-comments.blogspot.com/2012/07/powershell-dynamically-color-posh.html

  There are also many examples of this in the Gallery.

  ---

  \_(ツ)_/

  
  

  • Edited by jrv Monday, August 13, 2018 8:14 PM

  Monday, August 13, 2018 8:14 PM

  Reply

  |

  Quote
• 

  

  0

  Sign in to vote

  Unless you know how to do the CSS for the table the "Message" portion will always be damaged when displayed.

  The CSS can be specified on the Convert" and it will format the table.

  ---

  \_(ツ)_/

  Monday, August 13, 2018 8:16 PM

  Reply

  |

  Quote