cancel
Showing results for 
Search instead for 
Did you mean: 
Filtering the EV Event log.

When i'm investigating an issue it helps to filter out the noise and sort the Event log.

This is easily accomplished with a powershell script:

 $flt = @("may be corrupt", "hierarchy inversion")
get-eventlog "Symantec Enterprise Vault" -newest 50 -EntryType error,warning -computername nathanev | where -filterscript {$_.message -notmatch (
'(' + [string]::Join(')|(', $flt) + ')')} | ft eventid,entrytype,timewritten,message -wrap -auto

Here we are filtering out Stream object, hierarchy inversion showing the last 50 errors and warnings.