Public/Get-RubrikEvent.ps1
|
#requires -Version 3 function Get-RubrikEvent { <# .SYNOPSIS Retrieve information for events that match the value specified in any of the following categories: type, status, or ID, and limit events by date. .DESCRIPTION The Get-RubrikEvent cmdlet is used to pull a event data set from a Rubrik cluster. There are a vast number of arguments that can be supplied to narrow down the event query. .NOTES Written by J.R. Phillips for community usage GitHub: JayAreP .LINK https://rubrik.gitbook.io/rubrik-sdk-for-powershell/command-documentation/reference/get-rubrikevent .EXAMPLE Get-RubrikEvent -ObjectName "vm-foo" -EventType Backup This will query for any 'Backup' events on the Rubrik VM object named 'vm-foo' .EXAMPLE Get-RubrikVM -Name jbrasser-win | Get-RubrikEvent -Limit 10 Queries the Rubrik Cluster for any vms named jbrasser-win and return the last ten events for each VM found .EXAMPLE Get-RubrikEvent -EventType Archive -Limit 100 This qill query the latest 100 Archive events on the currently logged in Rubrik cluster .EXAMPLE Get-RubrikHost -Name SQLFoo.demo.com | Get-RubrikEvent -EventType Archive This will feed any Archive events against the Rubrik Host object 'SQLFoo.demo.com' via a piped query. #> [CmdletBinding()] Param( # Maximum number of events retrieved, default is to return 50 objects [parameter()] [int]$Limit = 50, # Earliest event retrieved [Alias('after_id')] [parameter()] [string]$AfterId, # Filter by Event Series ID [Alias('event_series_id')] [parameter()] [string]$EventSeriesId, # Filter by Status. Enter any of the following values: 'Failure', 'Warning', 'Running', 'Success', 'Canceled', 'Canceling’. [ValidateSet('Failure', 'Warning', 'Running', 'Success', 'Canceled', 'Canceling', 'Queued', IgnoreCase = $false)] [parameter()] [string]$Status, # Filter by Event Type. [ValidateSet('Archive', 'Audit', 'AuthDomain', 'Backup', 'CloudNativeSource', 'Configuration', 'Diagnostic', 'Discovery', 'Instantiate', 'Maintenance', 'NutanixCluster', 'Recovery', 'Replication', 'StorageArray', 'StormResource', 'System', 'Vcd', 'VCenter', IgnoreCase = $false)] [Alias('event_type')] [parameter()] [string]$EventType, # Filter by a comma separated list of object IDs. [Alias('object_ids')] [Parameter(ValueFromPipelineByPropertyName = $true)] [array]$id, # Filter all the events according to the provided name using infix search for resources and exact search for usernames. [Alias('object_name')] [parameter()] [string]$ObjectName, # Filter all the events before a date. [Alias('before_date')] [parameter()] [System.DateTime]$BeforeDate, # Filter all the events after a date. [Alias('after_date')] [parameter()] [System.DateTime]$AfterDate, # Filter all the events by object type. Enter any of the following values: 'VmwareVm', 'Mssql', 'LinuxFileset', 'WindowsFileset', 'WindowsHost', 'LinuxHost', 'StorageArrayVolumeGroup', 'VolumeGroup', 'NutanixVm', 'Oracle', 'AwsAccount', and 'Ec2Instance'. WindowsHost maps to both WindowsFileset and VolumeGroup, while LinuxHost maps to LinuxFileset and StorageArrayVolumeGroup. [Alias('object_type')] [parameter()] [string]$ObjectType, # A switch value that determines whether to show only on the most recent event in the series. When 'true' only the most recent event in the series are shown. When 'false' all events in the series are shown. The default value is 'true'. [Alias('show_only_latest')] [parameter()] [Switch]$ShowOnlyLatest, # A Switch value that determines whether to filter only on the most recent event in the series. When 'true' only the most recent event in the series are filtered. When 'false' all events in the series are filtered. The default value is 'true'. [Alias('filter_only_on_latest')] [parameter()] [Switch]$FilterOnlyOnLatest, # Rubrik server IP or FQDN [String]$Server = $global:RubrikConnection.server, # API version [String]$api = $global:RubrikConnection.api ) Begin { # The Begin section is used to perform one-time loads of data necessary to carry out the function's purpose # If a command needs to be run with each iteration or pipeline input, place it in the Process section # Check to ensure that a session to the Rubrik cluster exists and load the needed header data for authentication Test-RubrikConnection # API data references the name of the function # For convenience, that name is saved here to $function $function = $MyInvocation.MyCommand.Name # Retrieve all of the URI, method, body, query, result, filter, and success details for the API endpoint Write-Verbose -Message "Gather API Data for $function" $resources = Get-RubrikAPIData -endpoint $function Write-Verbose -Message "Load API data for $($resources.Function)" Write-Verbose -Message "Description: $($resources.Description)" } Process { # If the switch parameter was not explicitly specified remove from query params if(-not $PSBoundParameters.ContainsKey('ShowOnlyLatest')) { $Resources.Query.Remove('show_only_latest') } if(-not $PSBoundParameters.ContainsKey('FilterOnlyOnLatest')) { $Resources.Query.Remove('filter_only_on_latest') } $uri = New-URIString -server $Server -endpoint ($resources.URI) $uri = Test-QueryParam -querykeys ($resources.Query.Keys) -parameters ((Get-Command $function).Parameters.Values) -uri $uri $body = New-BodyString -bodykeys ($resources.Body.Keys) -parameters ((Get-Command $function).Parameters.Values) $result = Submit-Request -uri $uri -header $Header -method $($resources.Method) -body $body $result = Test-ReturnFormat -api $api -result $result -location $resources.Result $result = Test-FilterObject -filter ($resources.Filter) -result $result # Add 'date' property to the output by converting 'time' property to datetime object if (($null -ne $result) -and ($null -ne ($result | Select-Object -First 1).time)) { $result = $result | ForEach-Object { Select-Object -InputObject $_ -Property *,@{ name = 'date' expression = {Convert-APIDateTime -DateTimeString $_.time} } } } $result = Set-ObjectTypeName -TypeName $resources.ObjectTName -result $result return $result } # End of process } # End of function |