tag:blogger.com,1999:blog-4026285436658116929.post4779411079392847407..comments2023-03-01T00:48:49.964-08:00Comments on TheAgreeableCow: Using Get-WinEvent and XML filters to query Event ViewerTheAgreeableCowhttp://www.blogger.com/profile/09812333020695130356noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-4026285436658116929.post-24062578910994671192018-04-04T09:39:54.431-07:002018-04-04T09:39:54.431-07:00Wow, cool post. I'd like to write like this to...Wow, cool post. I'd like to write like this too - taking time and real hard work to make a great article... but I put things off too much and never seem to get started. Thanks though. <a href="https://www.sourcemiddleeast.com/" rel="nofollow">event directory</a><br />Muhammad Hassanhttps://www.blogger.com/profile/04282277249728542966noreply@blogger.comtag:blogger.com,1999:blog-4026285436658116929.post-85687277534456138782014-12-11T21:21:06.854-08:002014-12-11T21:21:06.854-08:00Awesome article! Made my script, based on yours, t...Awesome article! Made my script, based on yours, to monitor RD Gateway users. THX!OSAhttps://www.blogger.com/profile/18444580739528359889noreply@blogger.comtag:blogger.com,1999:blog-4026285436658116929.post-40424162316496717242012-08-08T05:37:07.439-07:002012-08-08T05:37:07.439-07:00Hi,
I have used your script, but we had a slight ...Hi,<br /><br />I have used your script, but we had a slight issue in that you declare param8 as number of pages printed, however in your screenshot param8 does not exist as its called param7 as well.<br /><br />To get round this, we modified your code that takes the page number and puts it into a separate column and removes it from the print size<br /><br /> #Get print job details<br /> $time = $LogEntry.TimeCreated<br /> $entry = [xml]$LogEntry.ToXml() <br /> $docName = $entry.Event.UserData.DocumentPrinted.Param2<br /> $Username = $entry.Event.UserData.DocumentPrinted.Param3<br /> $Computer = $entry.Event.UserData.DocumentPrinted.Param4<br /> $PrinterName = $entry.Event.UserData.DocumentPrinted.Param5<br /> $PrintSize = $entry.Event.UserData.DocumentPrinted.Param7<br /> $PrintPages = $entry.Event.UserData.DocumentPrinted.Param8<br /> <br /> #Putting a varible into " " will turn it into a text field<br /> <br /> $Pages = "$PrintSize"<br /> $TruePrintSize = $Pages.Substring(0, $Pages.IndexOf(" "))<br /><br /> $TruePages = $Pages.Substring($Pages.IndexOf(" "),$Pages.Length – $Pages.IndexOf(" "))<br /><br /><br />We then replaced +$PrintSize+ "," +$PrintPages+ with our new varibles +$TruePrintSize+ "," +$TruePages+<br /><br />Thanks for the original code thoughKimbiehttps://www.blogger.com/profile/18176769545156843708noreply@blogger.com