Total count of events different when retrieved directly from application and from command shell API

Total count of events different when retrieved directly from application and from command shell API

iamtulipin 24 Mar 2009 04:40

I am working with SCOM Command shell API and I observed that total count of events different when retrieved directly from application and from command shell API.

Following is the command that I am executing:get-event

Total no of events that I got were 3018 however, from the application when I search using the 'Advanced Search' functionality the total no of events found were - 1904.

Can anybody tell me why is this difference? Any help will be greatly appreciated.

Re: Total count of events different when retrieved directly from application and from command shell API

marcoshaw 24 Mar 2009 16:42

How exactly to you retrieve the count from the user interaface?

Re: Total count of events different when retrieved directly from application and from command shell API

iamtulipin 26 Mar 2009 08:51

You can do search from Tools->Advanced Search. Then select the appropriate entity to search for.

Re: Total count of events different when retrieved directly from application and from command shell API

marcoshaw 27 Mar 2009 12:49

The UI is only giving you the count from the last 24 hours by default, from what I can tell.

Try this instead:
PS>(get-event|where{$_.timegenerated -gt (get-date).addhours(-24)}).count

Still, I see a small difference: 190-ish in the UI vs 230-ish in the Command Shell.

I don't have time right now to try to figure out what's up…