sysadmin:audit_delle_modifiche_ai_job
This is an old revision of the document!
Audit modifiche ai job
Quando viene modificato un job viene loggato uno di questi tre eventi1):
- 23010 (creazione)
- 23050 (modeifica)
- 23090 (eliminazione)
Questo script raccoglie gli eventi di modifica:
$Date = Get-Date 01/02/2016 $VeeamServer = "srv-veeam" $colItems = Get-EventLog -LogName "Veeam Backup" -Source "Veeam MP" -After $Date -EntryType Information -ComputerName $VeeamServer | Where InstanceId -like '230*' | Select-Object TimeGenerated,InstanceId,Message foreach ($objItem in $colItems) { switch ($objItem.InstanceId) { 23010 {Write-Host $objItem.TimeGenerated, – , $objItem.Message} 23050 {Write-Host $objItem.TimeGenerated, – , $objItem.Message -ForegroundColor Yellow} 23090 {Write-Host $objItem.TimeGenerated, – , $objItem.Message -ForegroundColor Red} } }
sysadmin/audit_delle_modifiche_ai_job.1497165292.txt.gz · Last modified: 11/06/2017 07:14 by 127.0.0.1