PowerShell Get Event log and using the message argument and SLOW speed

The problem with get eventlog is it is god awful slow.
Everyone wants you to pipe the results to a where statement which makes it 100x slower expressly when there is already a –message argument there.
Problem is I am having little luck. Still taking 30 minutes or more and not producing any results even when looking for a computer I know is there
Can you confirm the syntax is correct for this? If it is correct how do I make this usable?
Thanks
$before = (Get-Date).AddMinutes(-30)
$after = (get-date).AddMonths(-1)
$before
$after
Get-EventLog -LogName Security -ComputerName MSDCSERV02 -Before $before -Newest 2 -Message "*W410South$*"
Lishron

i know you are trying to give me the answer but i guess i am to stupid on this one.
I am working with google and the help file.  Need to learn it better did not even know about -par 
if i type (see below)
If replace the word User or Computer with the actual name i need to find i get a big fat error that says I am  to stupid.  
Get-WinEvent -ComputerName MSDCSERV02 -FilterHashTable @{Logname='Security';Data="Computer"
# Or
Get-WinEvent -ComputerName MSDCSERV02 -FilterHashTable @{Logname='Security';Data="User"
# Both work
Lishron

Similar Messages

  • After updayting fire fox the applixation will not open I get a message that says the application failed to start because its side -by - side configureation is in correct. please see event log or use the command sxstrace.exe tool for more detail

    fire fox will not open

    See:
    *[[/questions/910134]]
    Seems to be caused by a corrupted Visual C++ installation (multiple versions can be installed side-by-side; SxS).
    You can try to use the sxstrace.exe tool to see if you can find which files are missing or corrupted and (re)install missing Visual C++ libraries.
    * http://www.vistax64.com/software/245768-side-side-configuration-incorrect.html
    * http://answers.microsoft.com/en-us/windows/forum/windows_7-pictures/error-the-application-has-failed-to-start-because/df019c0d-746e-42d0-ad68-465e18e3f3ef

  • How do you get an updated Apple ID to change on your iPhone?  I've changed logged in using the new ID and password but when I go to synch my apps, it reverts back to the old ID

    I've changed my Apple ID on iTunes and my MacBook Pro, iPhone, and iPad.  When I try to update my apps on my iPhone, it reverts to the old Apple ID

    It sounds like your device might be in Activation Lock.  Is it asking your to enter in an Apple ID & password, but only showing you the first letter of the email address and then some dots? Example: j•••••@icloud.com?
    If so, do you recognize that email?  Do you have an Apple ID that fits the same format?  If so, then go to www.cloud.com, log in with that Apple ID & password, and see if under Find My iPhone it shows this device.  If so, turn off the device, then remove the device from the list.

  • What am I doing to make my screen zoom in while I  am using my mouse?  It zooms to about double size, and using the control key and mouse will not return it to its former size.

    When I am searching the internet and using my mouse, my screen will suddenly zoom in to about double size.  Clicking control and mousing will not return it back to where it was.  I have no idea what I am doing to cause this to happen or how to reverse it.

    Hi.
    If you're using a Magic Mouse, a double tap on the mouse with one finger will zoom.
    Double tap again to unzoom.
    Helpful?

  • I get three icons (IE) using the move tool and other tools as well

    I'm using PS CS4 with windows 7and with different tools my pointer shows three different icons, also when I try to resize ctrl+shift it won't resize to scale. I can't figure whats wrong I've even re installed PS. I have a dead line tonight and somthing is messed up please help. Thanks in advance.
    Randy

    It's a little hard to determine whether you're getting wrong/multiple mouse pointers or what from your description...  Can you capture the screen showing the problem, and post it here?
    As a first suggestion, check to make sure your video drivers are up to date.
    -Noel

  • How to get the job logs from sm35 by using the queue id and session name?

    hi all,
    can any one please let me know how to read the job log from sm35 by using the session name and queue id. i have the job name and job count but is it possible to download the job log by using the queue id and session name.
    FYI..
    i want to read this job log and i want to send it to an email id.
    -> i am using the job_open and submitting the zreport via job name and job count and then i am using the function module  job_close.
    but this is not working in my scenario i have the queue id and session name by using this two i want to get the job log is there any function module available or code please provide me some inputs.
    thanks in advance,
    koushik

    Hi Bharath,
    If you want to download it to the local file then you can follow the instructions in the below link.
    How to download Batch Input Session Log?
    Regards,
    Sachin

  • How to know the message class and message number

    When the web client show warnning message,
    How can i to find the message class and message number?
    Thnaks
    Kevin

    Hi,
    You can goto tcode SAAB and activate the log for Checkpoint group BSP_WD_EXCEPTION_DISPLAY. whenever you log into Web UI you can see the details of the message.
    To troubleshoot teh message goto SE91 and enter the message class and message number. Select the message and then click on whereused. You will see all programs where this message is used.
    Hope this helps.
    Regards,
    Chandrakant

  • Opening iphoto I get an error message that says "you can't open your current photo library using this version of iphoto.  You have made changes to your photo library using a newer version of iphoto.  Please quit and use the latest version of iphoto.

    Opening iphoto I get an error message that says "you can't open your current photo library using this version of iphoto.  You have made changes to your photo library using a newer version of iphoto.  Please quit and use the latest version of iphoto."  I wouldn't have a clue as to how to change to a new version of iphoto even if I wanted to. 

    If you don't have a backup you can resort to give this a try:
    Starting over from scratch with new library
    Start over with a new library and import the Originals (iPhoto 09 and earlier) or the Masters (iPhoto 11) folder from your original library as follows:
    1. Open the library package like this.
    2. Launch iPhoto with the Option key held down and, when asked, select the option to create a new library.
    3. Drag the subfolders of the Originals (iPhoto 09 and earlier) or the Masters (iPhoto 11) folder from the open iPhoto Library package into the open iPhoto window a few at a time.
    This will create a new library with the same Events (but not necessarily the same Event names) as the original library but will not keep the metadata, albums, books slideshows and other projects.
    Note:  your current library will be left untouched for further attempts at a fix if so desired.
    OT

  • I am getting a message that my iphoto library cannot be opened because I mades changes to my photos in a newer version of iphoto and I need to quit and use the newest version of iPhoto.  but i cannot update it and or access my photos.  Help.  thanks.

    I am getting a message that my iphoto library cannot be opened because I mades changes to my photos in a newer version of iphoto and I need to quit and use the newest version of iPhoto.  but in update, it says i have no updates.   i dont even remember making changes in iphoto.Help.  thanks.

    What version of iPhoto? Assuming 09 or later...
    Option 1
    Back Up and try rebuild the library: hold down the command and option (or alt) keys while launching iPhoto. Use the resulting dialogue to rebuild. Choose to Repair Database. If that doesn't help, then try again, this time using Rebuild Database.
    If that fails:
    Option 2
    Download iPhoto Library Manager and use its rebuild function. (In Library Manager it's the FIle -> Rebuild command)
    This will create an entirely new library. It will then copy (or try to) your photos and all the associated metadata and versions to this new Library, and arrange it as close as it can to what you had in the damaged Library. It does this based on information it finds in the iPhoto sharing mechanism - but that means that things not shared won't be there, so no slideshows, books or calendars, for instance - but it should get all your events, albums and keywords, faces and places back.
    Because this process creates an entirely new library and leaves your old one untouched, it is non-destructive, and if you're not happy with the results you can simply return to your old one. 
    Regards
    TD 

  • My LR 4 suddenly no longer recognized my memory cards. I am using the same cards and cameras but consisitently get the error message:"files not imported because the files could not be read. they are jpg and nef files...I am stuck without my workhorse! Any

    My LR 4 suddenly no longer recognized my memory cards. I am using the same cards and cameras but consisitently get the error message:"files not imported because the files could not be read. they are jpg and nef files...I am stuck without my workhorse! Any advice is helpful. This has never happened in 6 years

    answered in your other thread LR 4 suddenly no longer recognizes files.

  • I recently bought a new macbook pro and set it up using the migration assistant and my mac mini.  I can't get the text message forwarding feature to work with both computers.

    I recently bought a new macbook pro and set it up using the migration assistant from my mac mini.  I can't get the text message forwarding feature to work with both computers.  It keeps saying that I only have 2 devices setup, my iPad and my macbook pro.  When I mess with the setting on my mac mini, it goes from saying that that is one of the devices to my macbook pro being the 2nd device.  I think that something happened as a result of my using the migration assistant and now it thinks that my macbook pro and my mac mini are one and the same computer.  Any ideas?

    Thanks, Sig.
    The old computer is a 2.6 Ghz Intel Core 2 Duo
    The new one is a 2.3 GHz intel core i7
    In going over this, thanks to "tallking it out" with you, I did discover the Text Edit problem.  Because I've still been unable to get the new computer text size (fonts or whatever) to match the old computer, I did not notice that the curser is now different--the line midway down the curser has to be placed on the line I am working upon, otherwise the edits go elsewhere on the page.  Now, with a bit of difficulty, I am able to get Text Edit to work correctly.
    If you have any ideas as to why my menu bar and Text Edit type are still so slow, I'd love to have them. 
    (I went through the process you suggested earlier, re my Trackpad preferences, and found no improvement.)

  • I can't use firefox after upgrading to 4.0. I get the message I have to restart my computer for upgrading, but ik doesn't start. I get the message over and over

    I can't open firefox after upgrading to 4.0
    I get the message over and over again that i have to restart my computer for upgrading to firefox.
    I tried new installation. But i got problems on all my accounts

    Start your '''Computer''' in safe mode. Then start Firefox. Try '''Safe''' web sites.
    Starting The Computer In Safe Mode;
    If running, turn your computer off.
    Remove any disks and thumb drives that are in your hard drives or ports.
    Now start your computer but also;
    '''Windows; '''Press the <F8> key repeatedly.
    '''Mac: '''Hold down the Shift key.
    '''Linux; '''Using the command line, Linux/Unix computers can be booted
    into various run levels that determine which resources are loaded.
    For example, "runlevel 1" is typically the equivalent to Windows and
    Mac safe modes.
    * Source; '''[http://encyclopedia2.thefreedictionary.com/Linux+Safe+Mode Safe Mode; Free Online Encyclopedia]'''
    When the '''Boot''' menu is displayed, release the key you were pressing.
    You must now choose what mode to use. The most used are;
    * Safe Mode; The computer runs with only a minimum set of programs.
    * Safe Mode '''With '''Networking; Same as above, but with internet access.

  • I downloaded and paid for an app on my ipad, how can I get it free on my iphone without using itunes as my laytop is broken. I cannot seem to find the purchase tab in app store? I am logged in using the same ID

    I downloaded and paid for an app on my ipad, how can I get it free on my iphone without using itunes as my laytop is broken. I cannot seem to find the purchase tab in app store? I am logged in using the same ID

    First, the app must be universal...designed for both iPhone/iPad:
    Tap App Store.
    Make sure you're signed in with the same Apple ID used for the original purchase.
    Tap Updates.
    Tap Purchased on the resulting screen.
    Locate the app in your Purchased tab.
    Tap the download icon.
    The app will begin downloading and you'll be taken back to your home screen.

  • I just bought a new iMac and used the Migration Assistant to transfer my files. Initially, all was working, but now a week later, I get the message that the application manager is missing, and I cannot get Photoshop and InDesign to launch. I do not want t

    I just bought a new iMac and used the Migration Assistant to transfer my files. Initially, all was working, but now a week later, I get the message that the application manager is missing, and I cannot get Photoshop and InDesign to launch. For my personal use, I did not a need to join Creative Cloud. Have you any suggestions for a work-around?

    Try to install Adobe application Manager from below link and check
    Adobe - Adobe Application Manager : For Macintosh : Adobe Application Manager : Thank You

  • I just downloaded the latest software to my iPhone 4 and I am now getting my sons messages.  he too uses the same itunes and pc to sync, how do I stop this?

    Hi, I downloaded the latest software for my iphone 4 and this morning I received text messages that were meant for my son.  we both use the same PC and iTunes for our iphones, so will he get a copy of my messages too when he upgrades his software?
    does anyone know how to stop this?  or how it happened in the first place?
    thanks
    Cathy

    You have an Apple ID signed in to all the devices which is causing this.
    "When you sign in to your Apple ID with iMessage using an iPhone with iOS 6, your Apple ID is linked to your phone number. This allows you to receive iMessages sent to your phone number on other iOS 6 devices signed in to the same Apple ID."
    To correct this, go into Settings > Messages > Send and Recieve at > See below...
    On your phone: Uncheck your son's phone number
    On his phone: Uncheck your phone number.
    On iPad: Uncheck both phone numbers to prevent iMessages sent to either number to also appear on the iPad.
    If you have email addresses associated here, then you may have to remove those as well, although you won't be able to remove the Apple ID that you're using. Any iMessage sent to that Apple ID will arrive at all the device unless you sign out of that Apple ID and create/use another Apple ID for that device.

Maybe you are looking for

  • 5800 wireless connection

    5800 is not connecting to the wlan connection

  • Lightbox trigger cause crash "out of bound"

    Im trying to extend my portfolio using ligthbox and triggers and was successful until I created a trigger and tried to move it on top of a thumbnail. Whenever I grab this one trigger (the others still work fine) I get a message that says "Invalid loc

  • Validating against XML Schema

    Hi, does someone know how to validate a XML file against a XSD File (XML Schema) in ABAP. Iam using the IXML Package. Thanks. Jim

  • Has or does anyone here use SoulSeek to get their mus

    I was recommended this site to get mp3s from, but I am afraid to get viruses from it. It says its ad free and spyware free, but I still dont trust a site thats free. Does anyone have experience with it's

  • Show Popup when new e-mail arrives by exchenage push.

    Hello, I created a mail account for my cooperate exchange server. The push works great, I receive all messages sent to me, and it even does a audio notification when I receive a message. Now the question I have is this: How can I make it show a Popup