Get-LastReboot.ps1
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 |
<#
.Synopsis Get-LastReboot scans the Event log of a local or remote computer for events with ID 1074. .DESCRIPTION Get-LastReboot scans the Event log of a local or remote computer for events with ID 1074. Created by: Jason Wasser Modified: 1/23/2015 .EXAMPLE Get-LastReboot Retrieves the reboot events from the local computer. .EXAMPLE Get-LastReboot -computername server1,computer03 Retrieves the reboot events from server1 and computer03. #> Function Get-LastReboot { [CmdletBinding()] [Alias()] [OutputType([int])] Param ( # Computer name(s) [Parameter(Mandatory=$false, ValueFromPipelineByPropertyName=$true, Position=0)] [string[]]$ComputerName=$env:COMPUTERNAME, # Number of newest recent entries from the System log [Parameter(Mandatory=$false,Position=1)] [int]$Newest=1000 ) Begin { } Process { foreach ($Computer in $ComputerName) { Get-EventLog -LogName System -Newest $Newest -ComputerName $Computer | Where-Object {$_.eventid -eq '1074'} | Format-Table machinename, username, timegenerated -AutoSize } } End { } } |