handlers/eventlog.psm1
function Get-EventLevel { param( $Level ) switch($Level){ ([LogLevel]::WARNING) {$EventLevel = 'Warning';break} ([LogLevel]::WARN) {$EventLevel = 'Warning';break} ([LogLevel]::ERROR) {$EventLevel = 'Error';break} ([LogLevel]::CRITICAL) {$EventLevel = 'Error';break} ([LogLevel]::FATAL) {$EventLevel = 'Error';break} default {$EventLevel = 'Information'} } $EventLevel } function New-uLogEventLog { param( [string] $Name = '', [string] $Source = $MyInvocation.ScriptName, [string] $Formatter = [LogFormatter]::EventlogDefault, [LogLevel] $Level = [LogLevel]::SUCCESS, [string] $LogName = 'Application', [Switch] $Enabled = $true ) Begin{ if ($Source -eq ''){$Source = 'Console'} } Process{ if ($Source -like '*\*'){ $EventSource = (Get-Item $Source).BaseName }else{ $EventSource = $Source } try{ New-EventLog -LogName Application -Source $EventSource -ErrorAction Stop }catch{ switch ($_.FullyQualifiedErrorId){ 'AccessIsDenied,Microsoft.PowerShell.Commands.NewEventLogCommand' { # script launched as user,so he does not have the privilege to create a new source # using PowerShell as source $EventSource = 'PowerShell' $LogName = 'Windows PowerShell' } } } $log = [PSCustomObject] @{Name = $Name;; Enabled = $Enabled; Type = 'eventlog'; Formatter = $Formatter; Level = $Level; Data = @(); Keep = $false; Source = $Source; LogName = $LogName; EventSource = $EventSource EventlogName = $LogName } $log | Add-Member -MemberType ScriptMethod -Name WriteLog -Value { param($Record) if (-not $this.Enabled){return} <# switch($Record.Level){ ([LogLevel]::WARNING) {$EventLevel = 'Warning';break} ([LogLevel]::WARN) {$EventLevel = 'Warning';break} ([LogLevel]::ERROR) {$EventLevel = 'Error';break} ([LogLevel]::CRITICAL) {$EventLevel = 'Error';break} ([LogLevel]::FATAL) {$EventLevel = 'Error';break} default {$EventLevel = 'Information'} } #> $EventLevel = Get-EventLevel -Level $Record.Level if ($this.EventSource -eq 'PowerShell'){ $Record.Id += 1000 } if ($this.Formatter -notmatch '-'){$this.Formatter = 'Format-' + $this.Formatter} $FormattedMessage = & $this.Formatter -Record $Record $eventMessage = "Source : $($this.Source) `n$FormattedMessage" if ($Record.Level -ge $this.Level){ if ($this.Keep -eq $true){ $this.Data += $Record }else{ Write-EventLog -LogName $this.LogName ` -EventId $Record.Id ` -EntryType $EventLevel ` -Source $this.EventSource ` -Message $eventMessage } } } $log | Add-Member -MemberType ScriptMethod -Name Flush -Value { $newData = [string]::Join("`n", $this.Data.Message) $evtId = ($this.Data | Measure-Object Id -Maximum).Maximum $maxLevel = ($this.Data.Level | Get-Unique | % {[LogLevel]::$_.Value__} | Measure-Object -Maximum).Maximum $level = [loglevel]::GetName([loglevel], [int] $maxLevel) $EventLevel = Get-EventLevel -Level $level $FormattedMessage = & $this.Formatter -Record (New-LogRecord -Message $newData -Level $level -Id $evtId) $eventMessage = "Source : $($this.Source) `n$FormattedMessage" Write-EventLog -LogName $this.LogName ` -EventId $evtId ` -EntryType $EventLevel ` -Source $this.EventSource ` -Message $eventMessage $this.Data = '' } $log } } |