xml/WindowsEventForwarding.Format.ps1xml

<?xml version="1.0" encoding="utf-8"?>
<Configuration>
    <ViewDefinitions>
        <View>
            <Name>WEF.Subscription_table</Name>
            <ViewSelectedBy>
                <TypeName>WEF.Subscription</TypeName>
            </ViewSelectedBy>
            <TableControl>
                <TableHeaders>
                    <TableColumnHeader>
                        <Label>ComputerName</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Name</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Type</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Enabled</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>ReadExisting</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>ContentFormat</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Locale</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>LogFile</Label>
                    </TableColumnHeader>
                </TableHeaders>
 
                <TableRowEntries>
                    <TableRowEntry>
                        <TableColumnItems>
                            <TableColumnItem>
                                <PropertyName>ComputerName</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Name</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Type</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Enabled</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>ReadExisting</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>ContentFormat</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Locale</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>LogFile</PropertyName>
                            </TableColumnItem>
                        </TableColumnItems>
                    </TableRowEntry>
                </TableRowEntries>
            </TableControl>
        </View>
 
        <View>
            <Name>WEF.Subscription_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.Subscription</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Description</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Type</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Mode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>LogFile</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ReadExistingEvents</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ContentFormat</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Locale</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>DeliveryMode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Query</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>MaxLatency</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>HeartBeatInterval</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>MaxItems</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TransportName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>PublisherName</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.Subscription.SourceInitiated_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.Subscription.SourceInitiated</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Description</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Type</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Mode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>LogFile</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ReadExistingEvents</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ContentFormat</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Locale</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>DeliveryMode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Query</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>MaxLatency</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>HeartBeatInterval</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>MaxItems</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TransportName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>PublisherName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>AllowedSourceNonDomainComputers</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>AllowedSourceDomainComputers</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>AllowedSourceDomainComputersSDDLString</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.Subscription.CollectorInitiated_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.Subscription.CollectorInitiated</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Description</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Type</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Mode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>LogFile</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ReadExistingEvents</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ContentFormat</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Locale</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>DeliveryMode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Query</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>MaxLatency</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>HeartBeatInterval</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>MaxItems</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TransportName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TransportPort</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>PublisherName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>CredentialsType</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>UserName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Password</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TargetEnabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TargetDisabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>TargetList</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.Subscription_wide</Name>
            <ViewSelectedBy>
                <TypeName>WEF.Subscription</TypeName>
            </ViewSelectedBy>
 
            <WideControl>
                <ColumnNumber>3</ColumnNumber>
                <WideEntries>
                    <WideEntry>
                        <WideItem>
                            <ScriptBlock>$_.ComputerName + "\" + $_.Name + " (" + $_.Status + ")"</ScriptBlock>
                        </WideItem>
                    </WideEntry>
                </WideEntries>
            </WideControl>
        </View>
 
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus_table</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus</TypeName>
            </ViewSelectedBy>
            <TableControl>
                <TableHeaders>
                    <TableColumnHeader>
                        <Label>ComputerName</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Name</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Enabled</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>Status</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>ErrorCode</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>ErrorTimeStamp</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>SourceName</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>SourceStatus</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>SourceErrorCode</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>SourceLastHeartBeat</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>SourceTimestampError</Label>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>SourceTimestampNextRetry</Label>
                    </TableColumnHeader>
                </TableHeaders>
             
                <TableRowEntries>
                    <TableRowEntry>
                        <TableColumnItems>
                            <TableColumnItem>
                                <PropertyName>ComputerName</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Name</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Enabled</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Status</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>ErrorTimeStamp</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>SourceName</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>SourceStatus</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>SourceErrorCode</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>SourceLastHeartBeat</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>SourceTimestampError</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>SourceTimestampNextRetry</PropertyName>
                            </TableColumnItem>
                        </TableColumnItems>
                    </TableRowEntry>
                </TableRowEntries>
            </TableControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus.Inactive_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus.Inactive</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorTimeStamp</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorText</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus.DisabledSourceDisabled_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus.DisabledSourceDisabled</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceStatus</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceErrorCode</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus.Active_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus.Active</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceStatus</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceErrorCode</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus.ActiveSourceActive_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus.ActiveSourceActive</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceStatus</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceLastHeartBeat</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus.ActiveSourceTrying_list</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus.ActiveSourceTrying</TypeName>
            </ViewSelectedBy>
            <ListControl>
                <ListEntries>
                    <ListEntry>
                        <ListItems>
                            <ListItem>
                                <PropertyName>ComputerName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Name</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Enabled</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>Status</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>ErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceName</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceStatus</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceErrorCode</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceTimestampError</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceTimestampNextRetry</PropertyName>
                            </ListItem>
                            <ListItem>
                                <PropertyName>SourceErrorText</PropertyName>
                            </ListItem>
                        </ListItems>
                    </ListEntry>
                </ListEntries>
            </ListControl>
        </View>
 
        <View>
            <Name>WEF.SubscriptionRuntimeStatus_wide</Name>
            <ViewSelectedBy>
                <TypeName>WEF.SubscriptionRuntimeStatus</TypeName>
            </ViewSelectedBy>
 
            <WideControl>
                <ColumnNumber>3</ColumnNumber>
                <WideEntries>
                    <WideEntry>
                        <WideItem>
                            <ScriptBlock>$_.ComputerName + "\" + $_.Name + ": " + $_.Status + "$(if($_.SourceName) { " (" + $_.SourceName + ": " + $_.SourceStatus + ")" })"</ScriptBlock>
                        </WideItem>
                    </WideEntry>
                </WideEntries>
            </WideControl>
        </View>
    </ViewDefinitions>
</Configuration>