Luigi Rosa

User Tools

Site Tools

Trace:
sysadmin:audit_delle_modifiche_ai_job

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

sysadmin:audit_delle_modifiche_ai_job [11/06/2017 07:14] – external edit 127.0.0.1sysadmin:audit_delle_modifiche_ai_job [20/12/2021 06:28] (current) – lrosa
Line 1: Line 1:
 +====== Audit modifiche ai job ======
 +
 +Quando viene modificato un job viene loggato uno di questi tre eventi(([[http://www.veeamcommunity.it/2016/veeam-backup-replication-audit-attivita-amministratori/|Audit Attività Amministratori]])):
 +  * 23010 (creazione)
 +  * 23050 (modeifica)
 +  * 23090 (eliminazione)
 +
 +Questo script raccoglie gli eventi di modifica:
 +<code powershell>
 +$Date = Get-Date 01/02/2016
 +$VeeamServer = "srv-veeam"
 +
 +$colItems = Get-EventLog -LogName "Veeam Backup" -Source "Veeam MP" -After $Date -EntryType Information -ComputerName $VeeamServer | Where InstanceId -like '230*' | Select-Object TimeGenerated,InstanceId,Message
 +
 +foreach ($objItem in $colItems) {
 +  switch ($objItem.InstanceId) { 
 +    23010 {Write-Host $objItem.TimeGenerated,  – , $objItem.Message} 
 +    23050 {Write-Host $objItem.TimeGenerated,  – , $objItem.Message -ForegroundColor Yellow} 
 +    23090 {Write-Host $objItem.TimeGenerated,  – , $objItem.Message -ForegroundColor Red} 
 +  }      
 +}
 +</code>
 +
 +