EventLog



Download the module and modify ROOT_EvLogstub.ps1 - out of the box it lists just the current server. You will probably want to add more from one of the inventories. Contribute more on Github.

This module expects the Bell framework to run under an account that has enough permissions to access other servers using WMI. For every server, you get a list of the last 7 days:

evlog1

When you open a day, you get a list of event sources. Events (Errors in Apllication log only) are filtered by specific day and are grouped, the number of events is shown in (). By clicking on the specific category, you get a list of events. If you consider userName to be sensitive, remove it from the report.


evlog2