Skip to content

Instantly share code, notes, and snippets.

@stknohg

stknohg/Get-StartupShutdownEventLogs.ps1

Created May 25, 2017 05:02
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save stknohg/b859b864af37ea2c5debfed496cbf6ae to your computer and use it in GitHub Desktop.
Save stknohg/b859b864af37ea2c5debfed496cbf6ae to your computer and use it in GitHub Desktop.
Download ZIP
OSの起動と停止のイベントログを抽出するコマンド
Raw
Get-StartupShutdownEventLogs.ps1
#
# よくわかりませんが何かの役に立つことがあるかもしれないらしいですね...
# PowerShell 2.0以降で動作します。
#
Get-WinEvent -LogName System -FilterXPath "*[System[Provider[@Name='Microsoft-Windows-Kernel-General'] and (EventID=12 or EventID=13)]]" | Select-Object TimeCreated, Id, Message | Format-Table -Autosize
Raw
Get-StartupShutdownEventLogs2.ps1
#
# クリップボードに内容をコピーする場合
# $OutputEncoding を変更しておかないと日本語が文字化けするので変えておく必要があります。
#
$OutputEncoding = [Text.Encoding]::Default
Get-WinEvent -LogName System -FilterXPath "*[System[Provider[@Name='Microsoft-Windows-Kernel-General'] and (EventID=12 or EventID=13)]]" | Select-Object TimeCreated, Id, Message | Format-Table -Autosize | clip
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment