Uptime Script

aochoar — Mon, 31 Oct 2011 05:00:00 GMT

Hello everyone, I'm trying to retrieve some information from Event ID 1074. I need the following information Domain\User and Comment. I alread have the servername and uptime output to html.

I have added the an example of the html output and a sample of the script, hope you can help.

Example of event ID,

Event Type:      Information
Event Source:      USER32
Event Category:      None
Event ID:      1074
Date:            10/30/2011
Time:            12:31:47 PM
User:            Domain\User
Computer:      Server Name
Description:
The process winlogon.exe has initiated the restart of computer SERVER on behalf of user Domain\User for the following reason: No title for this reason could be found
Reason Code: 0x800000ff
Shutdown Type: restart
Comment: Maintenance Reboot

HTMP Output Example
Machine Name Last Reboot TimeStamp User        Comment
ServerName      10/23/2011 1:05:46 PM    DomainName/Kevin  Maintenance Reboot

$ErrorActionPreference = "SilentlyContinue"
Remove-Item C:\Scripts\Output -Recurse
$InputFile = Get-Content MachineList.txt
$LastReboot = @()
foreach ($computer in $InputFile)
{
$x = "" | Select-Object 'Machine Name','Last Reboot TimeStamp','Reboot Initiator','Reboot Reason Code'
$x.'Machine Name' = $computer
$x.'Last Reboot TimeStamp' = [Management.ManagementDateTimeConverter]::ToDateTime((Get-WmiObject -class Win32_OperatingSystem -computername $computer -namespace "root\CIMV2").LastBootUpTime)
$LastReboot += $x
}
New-Item C:\Scripts\Output -ItemType directory

$LastReboot | Sort-Object 'Last Reboot TimeStamp' -Descending | ConvertTo-Html | Out-File C:\Scripts\Output\LastReboot.htm
Invoke-Expression C:\Scripts\Output\LastReboot.htm

Search results for 'app:forums' matching tags 'WMI', 'powerrshell', 'array', and 'advancedlogging'

Uptime Script