functions/Read-DbaXEFile.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
function Read-DbaXEFile {
    <#
    .SYNOPSIS
    Read XEvents from a xel or xem file
 
    .DESCRIPTION
    Read XEvents from a xel or xem file.
 
    .PARAMETER Path
    The path to the file. This is relative to the computer executing the command. UNC paths supported.
 
    .PARAMETER Exact
    By default, this command will add a wildcard to the Path because Eventing uses the file name as a template and adds characters. Use this to skip the addition of the wildcard.
 
    .PARAMETER Raw
    Returns the Microsoft.SqlServer.XEvent.Linq.PublishedEvent enumeration object
 
    .PARAMETER EnableException
    By default, when something goes wrong we try to catch it, interpret it and give you a friendly warning message.
    This avoids overwhelming you with "sea of red" exceptions, but is inconvenient because it basically disables advanced scripting.
    Using this switch turns this "nice by default" feature off and enables you to catch exceptions with your own try/catch.
 
    .NOTES
    Tags: Xevent
    Website: https://dbatools.io
    Copyright: (C) Chrissy LeMaire, clemaire@gmail.com
    License: GNU GPL v3 https://opensource.org/licenses/GPL-3.0
 
    .LINK
    https://dbatools.io/Read-DbaXEFile
 
    .EXAMPLE
    Read-DbaXEFile -SqlInstance ServerA\sql987 -Path C:\temp\deadocks.xel
 
    Returns events
 
    .EXAMPLE
    Get-DbaXESession -SqlInstance sql2014 -Session deadlocks | Read-DbaXEFile
 
    Reads remote xevents by acccessing the file over the admin UNC share
 
#>

    [CmdletBinding()]
    param (
        [parameter(Mandatory, ValueFromPipeline)]
        [object[]]$Path,
        [switch]$Exact,
        [switch]$Raw,
        [switch][Alias('Silent')]$EnableException
    )
    process {
        foreach ($file in $path) {

            if ($file -is [System.String]) {
                $currentfile = $file
            }
            else {
                if ($file.TargetFile.Length -eq 0) { continue }

                $instance = [dbainstance]$file.ComputerName

                if ($instance.IsLocalHost) {
                    $currentfile = $file.TargetFile
                }
                else {
                    $currentfile = $file.RemoteTargetFile
                }
            }

            if (-not $Exact) {
                $currentfile = $currentfile.Replace('.xel', '*.xel')
                $currentfile = $currentfile.Replace('.xem', '*.xem')
            }

            $accessible = Test-Path -Path $currentfile
            $whoami = whoami

            if (-not $accessible) {
                if ($file.Status -eq "Stopped") { continue }
                Stop-Function -Continue -Message "$currentfile cannot be accessed from $($env:COMPUTERNAME). Does $whoami have access?"
            }

            if ($raw) {
                New-Object Microsoft.SqlServer.XEvent.Linq.QueryableXEventData($currentfile)
            }
            else {
                # Make it selectable, otherwise it's a weird enumeration
                foreach ($row in (New-Object Microsoft.SqlServer.XEvent.Linq.QueryableXEventData($currentfile))) {
                    Select-DefaultView -InputObject $row -Property Name, Timestamp, Fields, Actions
                }
            }
        }
    }
}