PowerShell-Toolmaking

1.0.0.18

Chapters/scripting-at-scale/geteventlogs-start.ps1

                                #Requires -version 5.0

[cmdletbinding()]

Param(

[Parameter(Position = 0, Mandatory)]

[ValidateNotNullorEmpty()]

[string[]]$Computername,

[ValidateSet("Error","Warning","Information","SuccessAudit","FailureAudit")]

[string[]]$EntryType = @("Error","Warning"),

[ValidateSet("System","Application","Security",

"Active Directory Web Services","DNS Server")]

[string]$Logname = "System",

[datetime]$After = (Get-Date).AddHours(-24),

[Alias("path")]

[string]$OutputPath = "c:\work"

)

#get log data

Write-Host "Gathering $($EntryType -join ",") entries from $logname after $after from $($computername -join ",")"  -ForegroundColor cyan

$logParams = @{

    Computername = $Computername

    EntryType = $EntryType

    Logname = $Logname

    After = $After

}

$data = Get-EventLog @logParams

#create html report

$fragments = @()

$fragments += "<H1>Summary from $After</H1>"

$fragments += "<H2>Count by server</H2>"

$fragments += $data | group -Property Machinename  | 

Sort Count -Descending | Select Count,Name |

ConvertTo-HTML -As table -Fragment

$fragments += "<H2>Count by source</H2>"

$fragments += $data | group -Property source  | 

Sort Count -Descending | Select Count,Name |

ConvertTo-HTML -As table -Fragment

$fragments += "<H2>Detail</H2>"

$fragments += $data | Select Machinename,TimeGenerated,Source,EntryType,Message |

 ConvertTo-html -as Table -Fragment

$head = @"

<Title>Event Log Summary</Title>

<style>

h2 {

width:95%;

background-color:#7BA7C7;

font-family:Tahoma;

font-size:10pt; 

font-color:Black;

}

body { background-color:#FFFFFF;

       font-family:Tahoma;

       font-size:10pt; }

td, th { border:1px solid black; 

         border-collapse:collapse; }

th { color:white;

     background-color:black; }

table, tr, td, th { padding: 2px; margin: 0px }

tr:nth-child(odd) {background-color: lightgray}

table { width:95%;margin-left:5px; margin-bottom:20px;}

</style>

"@

$html = ConvertTo-Html -Body $fragments -PostContent "<h6>$(Get-Date)</h6>" -Head $head

#save results to a file

$filename = Join-path -Path $OutputPath -ChildPath "$(Get-Date -UFormat '%Y%m%d_%H%M')_EventlogReport.htm"

Write-Host "Saving file to $filename" -ForegroundColor Cyan

Set-content -Path $filename -Value $html -Encoding Ascii

#end of script