{"id":759,"date":"2017-12-28T08:00:23","date_gmt":"2017-12-27T23:00:23","guid":{"rendered":"https:\/\/www.itc109.com\/knowledge\/?p=759"},"modified":"2021-09-30T08:59:39","modified_gmt":"2021-09-29T23:59:39","slug":"ps-get-eventlog","status":"publish","type":"post","link":"https:\/\/www.itc109.com\/knowledge\/powershell\/ps-get-eventlog","title":{"rendered":"PowerShell &#8211; \u30a4\u30d9\u30f3\u30c8\u30ed\u30b0\u60c5\u5831\u3092\u53d6\u5f97"},"content":{"rendered":"<h4><strong>\u6982\u8981<\/strong><\/h4>\n<p>\u30a4\u30d9\u30f3\u30c8\u30ed\u30b0\u306e\u60c5\u5831\u3092\u53d6\u5f97\u3059\u308b\u65b9\u6cd5\u306b\u3064\u3044\u3066\u8a18\u8f09\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>&nbsp;<\/p>\n<h4><strong>\u624b\u9806<\/strong><\/h4>\n<p>\u6b21\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n<div class=\"hcb_wrap\">\n<pre class=\"prism line-numbers lang-plain\" data-lang=\"Plain Text\"><code>Get-EventLog -list<\/code><\/pre>\n<\/div>\n<p>\u5b9f\u884c\u7d50\u679c<\/p>\n<div class=\"hcb_wrap\">\n<pre class=\"prism line-numbers lang-plain\" data-lang=\"Plain Text\"><code>  Max(K) Retain OverflowAction        Entries Log\r\n  ------ ------ --------------        ------- ---\r\n  20,480      0 OverwriteAsNeeded       2,279 Application\r\n  20,480      0 OverwriteAsNeeded           0 HardwareEvents\r\n     512      7 OverwriteOlder              0 Internet Explorer\r\n  20,480      0 OverwriteAsNeeded           0 Key Management Service\r\n     128      0 OverwriteAsNeeded           0 OAlerts\r\n                                              Security\r\n  20,480      0 OverwriteAsNeeded       1,641 System\r\n  15,360      0 OverwriteAsNeeded         109 Windows PowerShell\r\n<\/code><\/pre>\n<\/div>\n<p><strong>OverflowAction<\/strong><\/p>\n<table>\n<tbody>\n<tr>\n<td>OverwriteOlder<\/td>\n<td>\u30a4\u30d9\u30f3\u30c8\u3092\u4e0a\u66f8\u304d\u3057\u306a\u3044\u3067\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u30a2\u30fc\u30ab\u30a4\u30d6\u3059\u308b<\/td>\n<\/tr>\n<tr>\n<td>OverwriteAsNeeded<\/td>\n<td>\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u30a4\u30d9\u30f3\u30c8\u3092\u4e0a\u66f8\u304d\u3059\u308b(\u6700\u3082\u53e4\u3044\u30a4\u30d9\u30f3\u30c8\u304b\u3089)<\/td>\n<\/tr>\n<tr>\n<td>DoNotOverwrite<\/td>\n<td>\u30a4\u30d9\u30f3\u30c8\u306f\u4e0a\u66f8\u304d\u3057\u306a\u3044(\u30ed\u30b0\u306f\u624b\u52d5\u3067\u6d88\u53bb)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<h4><strong>\u88dc\u8db3<\/strong><\/h4>\n<p>\u30d5\u30a1\u30a4\u30eb\u306b\u51fa\u529b\u3059\u308b\u5834\u5408\u3001\u6b21\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n<div class=\"hcb_wrap\">\n<pre class=\"prism line-numbers lang-plain\" data-lang=\"Plain Text\"><code>Get-EventLog -list | Export-Csv -encoding Default EventLog.csv<\/code><\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u6982\u8981 \u30a4\u30d9\u30f3\u30c8\u30ed\u30b0\u306e\u60c5\u5831\u3092\u53d6\u5f97\u3059\u308b\u65b9\u6cd5\u306b\u3064\u3044\u3066\u8a18\u8f09\u3057\u3066\u3044\u307e\u3059\u3002 &nbsp; \u624b\u9806 \u6b21\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002 Get-EventLog -list \u5b9f\u884c\u7d50\u679c Max(K) Retain OverflowAction E&#8230;<\/p>\n","protected":false},"author":3,"featured_media":806,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[81],"tags":[82],"class_list":["post-759","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-powershell","tag-82"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.itc109.com\/knowledge\/wp-content\/uploads\/sites\/2\/logo-powershell.png","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pacZwp-cf","_links":{"self":[{"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/posts\/759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/comments?post=759"}],"version-history":[{"count":10,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/posts\/759\/revisions"}],"predecessor-version":[{"id":2614,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/posts\/759\/revisions\/2614"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/media\/806"}],"wp:attachment":[{"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/media?parent=759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/categories?post=759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itc109.com\/knowledge\/wp-json\/wp\/v2\/tags?post=759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}