get-eventlog issue
Posted
by
Jim B
on Server Fault
See other posts from Server Fault
or by Jim B
Published on 2010-01-29T02:48:19Z
Indexed on
2012/06/01
16:43 UTC
Read the original article
Hit count: 321
powershell
I wanted to get a quick report of some log entries I saw on a server, so I ran:
Get-Eventlog -logname system -newest 10 -computer fs1 | fl
I got events back however the descriptions were all wrong. Here's an example:
Index : 1260055 EntryType : Warning InstanceId : 2186936367 Message : The description for Event ID '-2108030929' in Source 'W32Time' cannot be found. The local compute r may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'time. windows.com,0x1' Category : (0) CategoryNumber : 0 ReplacementStrings : {time.windows.com,0x1} Source : W32Time TimeGenerated : 1/25/2010 10:43:31 AM TimeWritten : 1/25/2010 10:43:31 AM UserName :
Note that if I pull the event ID property it's correct (in this case 38)
Is this is known issue or is something wrong. The messages resolve fine via event viewer locally and remotely
Here is the powershell version info:
Name : ConsoleHost
Version : 2.0
InstanceId : bc58fcf8-bba3-4ca8-8972-17dbd5d9ff08
UI : System.Management.Automation.Internal.Host.InternalHostUserInterface
CurrentCulture : en-US
CurrentUICulture : en-US
PrivateData : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy
IsRunspacePushed : False
Runspace : System.Management.Automation.Runspaces.LocalRunspace
Here is the revised version info:
Name Value
---- -----
CLRVersion 2.0.50727.3603
BuildVersion 6.0.6002.18111
PSVersion 2.0
WSManStackVersion 2.0
PSCompatibleVersions {1.0, 2.0}
SerializationVersion 1.1.0.1
PSRemotingProtocolVersion 2.1
© Server Fault or respective owner