powershell_scripts icon indicating copy to clipboard operation
powershell_scripts copied to clipboard
verified publisher icon xme

produces errors on Server 2012R2

Open BustedSec opened this issue 8 years ago • 0 comments

I ran the script after settting up a corresponding logstash filter and ended up getting nothing but red error output

At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

Get-WinEvent : The data is invalid At C:\Temp\evt2ls.ps1:53 char:9

  • $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} | Con ...
  •     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    • CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali dDataException
    • FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command s.GetWinEventCommand

BustedSec avatar Jan 23 '17 15:01 BustedSec