tests/Test-HostRestarts.ps1
|
function Test-HostRestarts { [CmdletBinding()] param ( [parameter()][string] $TestName = "Unplanned Server Restarts", [parameter()][string] $TestGroup = "operation", [parameter()][string] $TestCategory = "HOST", [parameter()][string] $Description = "Check for unplanned system restarts", [parameter()][hashtable] $ScriptParams ) try { $startTime = (Get-Date) #[int]$Setting = Get-CmHealthDefaultValue -KeySet "keygroup:keyname" -DataSet $CmHealthConfig [System.Collections.Generic.List[PSObject]]$tempdata = @() # for detailed test output to return if needed $stat = "PASS" # do not change this $except = "WARNING" $msg = "No issues found" # do not change this either $query = @" <QueryList> <Query Id="0" Path="System"> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-Kernel-Power'] and (EventID=41) and TimeCreated[timediff(@SystemTime) <= 604800000]]]</Select> </Query> </QueryList> "@ if ($ScriptParams.ComputerName -ne $env:COMPUTERNAME) { Write-Log -Message "running on $($ScriptParams.ComputerName)" if ($null -ne $ScriptParams.Credential) { Write-Log -Message "credential was provided" $res = Get-WinEvent -LogName "System" -FilterXPath $query -ComputerName $ScriptParams.ComputerName -Credential $ScriptParams.Credential -ErrorAction SilentlyContinue } else { $res = Get-WinEvent -LogName "System" -FilterXPath $query -ComputerName $ScriptParams.ComputerName -ErrorAction SilentlyContinue } } else { Write-Log -Message "running on localhost" $res = Get-WinEvent -LogName "System" -FilterXPath $query -ErrorAction SilentlyContinue } if ($res.Count -gt 0) { $stat = $except $msg = "$($res.Count) items found" $winevent = [pscustomobject]@{TimeCreated = $_.TimeCreated; Computer = $_.MachineName; Message = $_.Message} $res | Foreach-Object {$tempdata.Add($winevent)} } } catch { $stat = 'ERROR' $msg = $_.Exception.Message -join ';' } finally { Set-CmhOutputData } } |