none
Get-Eventlog : The event log "Some LogName" does not exist. RRS feed

  • Question

  • Hi,

    I want get event "Starting/Finished synchronize profile" to see how long roaming profile synchronize. An can't get events :)

    If run

    Get-WinEvent -ListLog * -Force -ComputerName $Machine  | Sort-Object LogName

    I can see, at result:  "Circular 4194304 279 Microsoft-Windows-User Profile Service/Operational "

    At eventviewer, I can see them. How can I read that events on remote PC, what  LogName I mast to use.

    $Machine = "MININT-5EP854A" $List = (Get-WinEvent -ListLog 'Microsoft-Windows-User Profile Service/Operational' -ComputerName $Machine).LogName Get-Eventlog -LogName $list -ComputerName $Machine -newest 1000 | Where-Object {($_.EventID -eq '7')}

    Get-Eventlog : The event log 'Microsoft-Windows-User Profile Service/Operational' on computer 'MININT-5EP854A' does not exist. At line:3 char:1 + Get-Eventlog -LogName $list -ComputerName $Machine -newest 1000 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Get-EventLog], InvalidOperationException + FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.PowerShell.Commands.GetEventLogCommand


    And one more question, how the best way to assemble (combine) informational to one location, for analysis it (like a little DB). I can only use a text file to combine the results :)


    Thanks!

    Friday, April 28, 2017 7:44 PM

Answers

  • Get-EventLog cannot read new log files.

    New log files exist only on Vista and later systems.

    ListLog does not read log files:

    This is the command that works:

    Get-WinEvent -LogName  'Microsoft-Windows-User Profile Service/Operational' -Computer alpha


    \_(ツ)_/

    Friday, April 28, 2017 7:54 PM

All replies

  • Get-EventLog cannot read new log files.

    New log files exist only on Vista and later systems.

    ListLog does not read log files:

    This is the command that works:

    Get-WinEvent -LogName  'Microsoft-Windows-User Profile Service/Operational' -Computer alpha


    \_(ツ)_/

    Friday, April 28, 2017 7:54 PM
  • Sorry it works

    Get-WinEvent -LogName "Microsoft-Windows-User Profile Service/Operational" -ComputerName $Machine | Where-Object {($_.ID -eq '7')}

    Friday, April 28, 2017 8:00 PM
  • Get-EventLog cannot read new log files.

    New log files exist only on Vista and later systems.

    ListLog does not read log files:

    This is the command that works:

    Get-WinEvent -LogName  'Microsoft-Windows-User Profile Service/Operational' -Computer alpha


    \_(ツ)_/

    Thanks. How get more properties like user name :) It return SID


    Friday, April 28, 2017 8:02 PM