PowerShell for Windows Admins

Apr 26 2011   1:08PM GMT

System Stability part II

Richard Siddaway Richard Siddaway Profile: Richard Siddaway

Last time we looked at the Win32_ReliabilityStabilityMetrics and closed by stating we’d look at the reliability records.  Reliability records are event log records related to system reliability.  The working part of the record is shown below (after the system properties are removed)

ComputerName     : RSLAPTOP01
EventIdentifier  : 19
InsertionStrings : {Security Update for Microsoft .NET Framework 4 on  Windows XP, Windows Server     2003, Windows Vista, Windows 7, Windows Server 2008, {ac2a295d-228e-4941-8568-ff131f842920}, 105}

Logfile          : System
Message          : Installation Successful: Windows successfully installed the following update: Security Update for Mi                 crosoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2446708)

ProductName      : Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008
RecordNumber     : 180291
SourceName       : Microsoft-Windows-WindowsUpdateClient
TimeGenerated    : 20110414224442.000000-000
User             : NT AUTHORITY\SYSTEM

 

This is fairly typical in that it shows something that has changed and could therefore affect system reliability. Which logs are involved.  On my system

PS> Get-WmiObject Win32_ReliabilityRecords | select Logfile -Unique

Logfile
——-
System
Application

As we are talking about event logs they have to have a source

PS> Get-WmiObject Win32_ReliabilityRecords | select SourceName -Unique

SourceName
———-
Microsoft-Windows-WindowsUpdateClient
Application Error
MsiInstaller
Microsoft-Windows-UserPnp
Application Hang
Application-Addon-Event-Provider
EventLog

If we want to see the events related to a particular source then we can do this

PS> Get-WmiObject -Class Win32_ReliabilityRecords -Filter "SourceName=’Application Hang’" | Format-Table TimeGenerated, ProductName, Message –wrap –AutoSize

What we really need is a function to wrap the choices so we just choose parameters. Thats what we’ll do next

 Comment on this Post

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to: