Creating a custom psobject using pipelined output of a logman query for parameters

-

the output of logman.exe query below. i'm having trouble pulling info want query. don't need vast majority of text such specific counters, root path etc. believe because output of command text opposed object, therefore can't manipulate way to. i wrong no powershell expert, but i sure that problem. question is, how can take text output of logman query, , use given properties within text (name, status, root path, etc...) , values, create powershell object can manipulate in same way manipulate other output get-computer , such? 1 problem see there 2 "name:" fields different values associated them. i've been digging couple of hours on , haven't had luck, sorry if missed obvious.

name:                 khi  status:               running  root path:            c:\perflogs\  segment:              off  schedules:            on  run as:               system    name:                 khi\khi  type:                 counter  output location:      c:\perflogs\khi_<servername>_06220638.csv  append:               off  circular:             off  overwrite:            off  sample interval:      15 second(s)    counters:    \processor information(*)\% processor time    \memory\available mbytes    \network interface(*)\output queue length    \network interface(*)\outbound packets discarded    \network interface(*)\inbound packets discarded    \network interface(*)\packets outbound discarded    \network interface(*)\packets received discarded    \physicaldisk(*)\avg. disk sec/read    \physicaldisk(*)\avg. disk sec/write    \ls:usrv - dbstore\usrv - queue latency (msec)    \ls:usrv - dbstore\usrv - sproc latency (msec)    \ls:usrv - dbstore\usrv - throttled requests/sec    \ls:usrv - regdbstore\usrv - queue latency (msec)    \ls:usrv - regdbstore\usrv - sproc latency (msec)    \ls:usrv - regdbstore\usrv - throttled requests/sec    \ls:usrv - shareddbstore\usrv - queue latency (msec)    \ls:usrv - shareddbstore\usrv - sproc latency (msec)    \ls:usrv - shareddbstore\usrv - throttled requests/sec    \ls:sip - peers(*)\sip - sends timed-out/sec    \ls:sip - responses\sip - local 503 responses/sec    \ls:sip - peers(*)\sip - average outgoing queue delay    \ls:sip - protocol\sip - incoming requests dropped/sec    \ls:sip - peers(*)\sip - flow-controlled connections    \ls:sip - protocol\sip - incoming responses dropped/sec    \ls:sip - protocol\sip - average incoming message processing time    \ls:sip - authentication\sip - authentication system errors/sec    \ls:sip - load management\sip - average holding time incoming messages    \ls:sip - load management\sip - incoming messages timed out    \ls:routingapps - inter cluster routing\routingapps - number of primary registrar timeouts    \ls:routingapps - inter cluster routing\routingapps - number of backup registrar timeouts    \ls:lyss - storage service api\lyss - current number of storage service stale queue items    \ls:usrv - cluster manager\usrv - number of data loss events state change    \ls:usrv - cluster manager\usrv - number of data loss events without state change    \ls:usrv - cluster manager\usrv - number of failures of replication operations sent other  replicas per second    \ls:xmppfederation - sip instant messaging\xmppfederation - failure imdns sent/sec    \ls:routingapps - emergency call routing\routingapps - number of incoming failure response

logman export test  -xml c:\scripts\text.xml $xml=[xml](cat "c:\scripts\text.xml") $xml.datacollectorset.status

\_(ツ)_/



Windows Server  >  Windows PowerShell



Comments

Post a Comment

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

-
i seeing odd error on 1 of our domain controllers. have dealt event id 1058 errors whereby policy (or policies) not replicating, receiving error along error code 1326 on server, , apparently happening default domain policy: log name:      system source:        microsoft-windows-grouppolicy date:          8/10/2015 3:09:54 pm event id:      1058 task category: none level:         error keywords:      user:          s-1-5-21-1484152634-2550175353-3916092219-3287 computer:      <dc name>.<domainname> description: processing of group policy failed. windows attempted read file http://schemas.microsoft.com/win/2004/08/events/event ">   <system>     <provi...
Read more

Suspicious event log Event ID: 4905

-
hi thr, could please me understand causing such event logs generate ? as  i understand, vssvc.exe pertains volume shadow copy used backup purpose.  we have third party application used taking backup of servers. the event longs generated following messages: 1) attempt made unregister security event source. 2) attempt made register security event source. these events not regular generated on random days. standard fields: date:               2013/10/19 time:               02:32:19 importance:         critical rule name:          security event monitored machine:  <domain controller> log format:         windows log name:           security event id:           4905 in work hours:      yes dynamic fields: internal timestamp: 2013/10/19 ...
Read more

DCOM received error "2147746132" from...

-
hi everybody, i have dc (my windows essentials 2012 server) , windows 2012 server in network.  the windows server 2012 inside domain. on server, got "non stopping" error says in event logs : ===> dcom received error "2147746132" fromd computer xxxx(my dc computer) while server trying activation : {6df8cb71-153b-4c66-8fc4-e59301b8011b} it never stops, got 11000+ new events :s i found : http://support.microsoft.com/kb/971153/fr i'm not sure should ? does got idea ? matthieu. hi, please try solution mentioned in below link: http://www.eventid.net/display-eventid-10006-source-dcom-eventno-272-phase-1.htm regards, cicely Windows Server  >  Windows Server 2012 General ...
Read more