But, as you migh know, there's a bunch of limitiations, like "Event Views" don't show up.
So, i had the need to overcome this issue.
Solution was to put Powershell in a SCOM Dashboard.
First, create a new Powershell Grid Layout "Dashboard View" with one cell.
Configure it and paste this code :
# This example is for a Rule i have for unexpected restart/shutdowns (EventID = 1074)
# You can change as you want!
$a = Get-SCOMManagementGroup
$b = New-Object Microsoft.EnterpriseManagement.Monitoring.MonitoringEventCriteria "RuleId='e7c857e6-7654-5f89-ecdf-8f93325c83ee'"
$Events = $a.GetMonitoringEvents($b)
$i = 0
foreach ($Event in $Events) {
$EventDescription = 'User : ' + [string]$Event.Parameters[6] + ' || Type : ' + [string]$Event.Parameters[4] + ' || Reason : ' + [string]$Event.Parameters[5]
$TimeAdded = $Event.TimeAdded
$LoggingComputer = [string]$Event.LoggingComputer
$dataObject = $ScriptContext.CreateInstance("xsd://foo!bar/baz")
$dataObject["Id"]=$i.toString()
$dataObject["TimeAdded"]=$TimeAdded
$dataObject["LoggingComputer"]=$LoggingComputer
$dataObject["Description"]=$EventDescription
$ScriptContext.ReturnCollection.Add($dataObject)
$i++
}
:) Enjoy!
No comments:
Post a Comment