Update README.md
This commit is contained in:
parent
89ceab0df4
commit
5cc79073f9
1 changed files with 12 additions and 12 deletions
24
README.md
24
README.md
|
|
@ -1186,7 +1186,7 @@
|
||||||
`Get-VBRBackupServerCertificate` \
|
`Get-VBRBackupServerCertificate` \
|
||||||
`Get-VBRRestorePoint` \
|
`Get-VBRRestorePoint` \
|
||||||
`Get-VBRViProxy` \
|
`Get-VBRViProxy` \
|
||||||
`https://veeam-11:9419/swagger/ui/index.html` RAST API
|
`https://veeam-11:9419/swagger/ui/index.html` API
|
||||||
|
|
||||||
# XML
|
# XML
|
||||||
|
|
||||||
|
|
@ -1202,17 +1202,17 @@
|
||||||
`else {return}` \
|
`else {return}` \
|
||||||
`}`
|
`}`
|
||||||
|
|
||||||
`$FilterXPath = '<QueryList><Query Id="0"><Select>*[System[EventID=21]]</Select></Query></QueryList>'`
|
`$FilterXPath = '<QueryList><Query Id="0"><Select>*[System[EventID=21]]</Select></Query></QueryList>'` \
|
||||||
`$RDPAuths = Get-WinEvent -ComputerName $srv -LogName "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" -FilterXPath $FilterXPath`
|
`$RDPAuths = Get-WinEvent -ComputerName $srv -LogName "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" -FilterXPath $FilterXPath` \
|
||||||
`[xml[]]$xml = $RDPAuths | Foreach {$_.ToXml()}`
|
`[xml[]]$xml = $RDPAuths | Foreach {$_.ToXml()}` \
|
||||||
`$EventData = Foreach ($event in $xml.Event) {`
|
`$EventData = Foreach ($event in $xml.Event) {` \
|
||||||
`New-Object PSObject -Property @{`
|
`New-Object PSObject -Property @{` \
|
||||||
`"Connection Time" = (Get-Date ($event.System.TimeCreated.SystemTime) -Format 'yyyy-MM-dd hh:mm K')`
|
`"Connection Time" = (Get-Date ($event.System.TimeCreated.SystemTime) -Format 'yyyy-MM-dd hh:mm K')` \
|
||||||
`"User Name" = $event.UserData.EventXML.User`
|
`"User Name" = $event.UserData.EventXML.User` \
|
||||||
`"User ID" = $event.UserData.EventXML.SessionID`
|
`"User ID" = $event.UserData.EventXML.SessionID` \
|
||||||
`"User Address" = $event.UserData.EventXML.Address`
|
`"User Address" = $event.UserData.EventXML.Address` \
|
||||||
`"Event ID" = $event.System.EventID`
|
`"Event ID" = $event.System.EventID` \
|
||||||
`}}`
|
`}}` \
|
||||||
`$EventData`
|
`$EventData`
|
||||||
|
|
||||||
# Git
|
# Git
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue