Microsoft.PowerShell.Commands.Diagnostics
Class that implements the Get-Counter cmdlet.
Class that implements the Get-WinEvent cmdlet.
ListLog parameter.
GetLog parameter.
ListProvider parameter.
ProviderName parameter.
Path parameter.
MaxEvents parameter.
ComputerName parameter.
Credential parameter.
FilterXPath parameter.
FilterXml parameter.
FilterHashtable parameter.
Force switch.
Oldest switch.
BeginProcessing() is invoked once per pipeline: we will load System.Core.dll here.
EndProcessing() is invoked once per pipeline.
ProcessRecord() override.
This is the main entry point for the cmdlet.
Class that implements the New-WinEvent cmdlet.
This cmdlet writes a new Etw event using the provider specified in parameter.
ProviderName.
Id (EventId defined in manifest file)
Version (event version)
Event Payload.
BeginProcessing.
ProcessRecord.
EndProcessing.
A helper reading in a Unicode string with embedded NULLs and splitting it into a StringCollection.
Connects to a single named datasource, initializing m_hDataSource variable.
A strongly-typed resource class, for looking up localized strings, etc.
constructor
Returns the cached ResourceManager instance used by this class.
Overrides the current threads CurrentUICulture property for all
resource lookups using this strongly typed resource class.
Looks up a localized string similar to
The {0} file does not have the expected file name extension. Specify only .blg, .csv, or .tsv files when you use the Path parameter.
Looks up a localized string similar to
Internal performance counter API call failed. Error: {0:x8}.
Looks up a localized string similar to
You must specify at least one Log, Provider or Path key-value pair.
Looks up a localized string similar to
There is not an event provider on the {0} computer that matches "{1}".
Looks up a localized string similar to
A null value was encountered in the {0} hash table key. Null values are not permitted.
Looks up a localized string similar to
Constructed structured query:
{0}.
Looks up a localized string similar to
The {0} provider writes events to the {1} log.
Looks up a localized string similar to
The value of the StartTime parameter must be less than the value of the EndTime parameter.
Looks up a localized string similar to
There is not an event log on the {0} computer that matches "{1}".
Looks up a localized string similar to
Microsoft
Looks up a localized string similar to
The Circular parameter will be ignored unless the MaxSize parameter is also specified.
Looks up a localized string similar to
Unable to open the {0} file for writing.
Looks up a localized string similar to
Invalid value '{0}' specified for keyword.
Looks up a localized string similar to
The {0} performance counter cannot be exported to the {1} file because it was not part of the first sample set.
Looks up a localized string similar to
No events were found that match the specified selection criteria.
Looks up a localized string similar to
The default values for this command failed. Error: {0:x8}.
Looks up a localized string similar to
You cannot import different types of performance log files in the same command. Specify only one type of file in the Path parameter.
Looks up a localized string similar to
The {0} path does not appear to be a valid log file path. Specify a valid file system path.
Looks up a localized string similar to
A valid Event Id must be specified.
Looks up a localized string similar to
Could not retrieve information about the {0} provider. Error: {1}.
Looks up a localized string similar to
The {0} event log can be read only in the forward chronological order because it is an analytical or a debug log. To see events from the {0} event log, use the Oldest parameter in the command.
Looks up a localized string similar to
The following export destination path is ambiguous: {0}.
Looks up a localized string similar to
The {0} performance counter path is not valid.
Looks up a localized string similar to
The data in one of the performance counter samples is not valid. View the Status property for each PerformanceCounterSample object to make sure it contains valid data.
Looks up a localized string similar to
Provided payload does not match with the template that was defined for event id {0}.
The defined template is following:
{1}
Looks up a localized string similar to
Cannot find any performance counter sets on the {0} computer that match the following: {1}.
Looks up a localized string similar to
No valid counter paths were found in the files.
Looks up a localized string similar to
Unable to create the {0} file. Verify that the path is valid.
Looks up a localized string similar to
Could not find any performance counter sets on the {0} computer: error {1:x8}. Verify that the {0} computer exists, that it is discoverable, and that you have sufficient privileges to view performance counter data on that computer.
Looks up a localized string similar to
Event cannot be written because there are no events defined with id {0} for the provider {1}. Please correct the event id and try again.
Looks up a localized string similar to
The {0} Context key-value is not a valid SID or NT account name.
Looks up a localized string similar to
Event cannot be written because the specified version {0} for event {1} is not defined for the provider {2}. Please correct the version and try again.
Looks up a localized string similar to
You cannot import more than 32 .blg counter log files in each command.
Looks up a localized string similar to
The specified providers do not write events to the {0} log. This log will be ignored.
Looks up a localized string similar to
The following value is not in a valid security identifier (SID) format: {0}. Enter a valid SID, such as S-1-5-32-544.
Looks up a localized string similar to
No provider found with name {0}.
Looks up a localized string similar to
Cannot retrieve information about the {0} performance counter set because access was denied.
Looks up a localized string similar to
Event cannot be written because multiple events with id {0} have been defined for provider {1}. Please provide a version for the event and try again.
Looks up a localized string similar to
The {0} event log file can be read only in the forward chronological order because it is an .etl or an .evt file. To see events from the {0} event log, use the Oldest parameter in the command.
Looks up a localized string similar to
Provider name must be specified.
Looks up a localized string similar to
The {0} file does not appear to be a valid log file. Specify only .evtx, .etl, or .evt files as values of the Path parameter.
Looks up a localized string similar to
The {0} performance counter path is either not valid or it is not present in the following files: {1}.
Looks up a localized string similar to
Timestamp
Looks up a localized string similar to
The following value is not in a valid DateTime format: {0}.
Looks up a localized string similar to
To access the '{0}' log start PowerShell with elevated user rights. Error: {1}
Looks up a localized string similar to
Cannot retrieve event message text.
Looks up a localized string similar to
The {0} file already exists. To overwrite this file, use the Force parameter in the Export-Counter command.
Looks up a localized string similar to
The Continuous parameter and the MaxSamples parameter cannot be used in the same command.
Looks up a localized string similar to
This cmdlet can be run only on Microsoft Windows 7 and above.
Looks up a localized string similar to
This PowerShell snap-in contains Windows Eventing and Performance Counter cmdlets.
Looks up a localized string similar to
Cannot find any performance counter sets in the {0} files that match the following: {1}.
Looks up a localized string similar to
The specified providers do not write events to any of the specified logs.
Looks up a localized string similar to
Cooked Values
Looks up a localized string similar to
You cannot import more than one comma-separated (.csv) or tab-separated (.tsv) performance counter file in each command.
Looks up a localized string similar to
Log count ({0}) is exceeded Windows Event Log API limit ({1}). Adjust filter to return less log names.