Powershell pipes and eventlog
Get-EventLog System | Where-Object {$_.entrytype -like "*rror"} | Where-Object {$_.Message -like "*failed*"}| Select-Object message | Export-Clixml c:\wee.xml
make it a variable with $Results = Get-EventLog System | Where-Object {$_.entrytype -like "*rror"} | Where-Object {$_.Message -like "*failed*"}| Select-Object message
winrm and winrs a management tool for windows 2008
If you are using Windows 2008 Server, WinRM is installed but not enabled by default. This is a good security precaution. The easiest way to determine if WinRM is already enabled and started on your machine is to go to a CMD prompt and run:
winrm enumerate winrm/config/listener
If you get no response them WinRM is not running. To configure WinRM to start automatically and allow for remote access, use the winrm quickconfig command like this:
C:\Users\Administrator> winrm quickconfig
WinRM is not set up to allow remote access to this machine for management.
The following changes must be made:
Create a WinRM listener on HTTP://* to accept WS-Man requests to any IP on this machine.
Make these changes [y/n]? y
WinRM has been updated for remote management.
Created a WinRM listener on HTTP://* to accept WS-Man requests to any IP on this machine.
C:\Users\Administrator>
Once I configured the quickconfig, I reran the enumeration command with these results:
C:\Users\Administrator> winrm e winrm/config/listener
Listener
Address = *
Transport = HTTP
Port = 80
Hostname
Enabled = true
URLPrefix = wsman
CertificateThumbprint
ListeningOn = 10.253.15.98, 127.0.0.1, ::1, fe80::5efe:10.253.15.98%11, fe80::9583:2148:e1ef:6444%10
C:\Users\Administrator
From this, I know that WinRMis enabled.
Similar in operation to the former Sysinternals tool PSExec, WinRS leverages Windows Remote Management to let you launch processes on remote machines. Where it differs from PSExec is in its ability to easily pass through firewalls in the same way as WinRM. For example, if you want to discover IP information about a remote machine, you can remotely launch ipconfig with the -all switch on that machine using this syntax:
winrs -r:{Remote Host} ipconfig -all
Another handy use of WinRS can be when installing software on remote systems. If you want to quietly install an application using an MSI file onto a remote machine, use the following syntax. This syntax assumes the MSI file has already been deposited into the C:\ folder.
winrs -r:{Remote Host} msiexec.exe /i c:\install.msi /quiet
I have used this for other things as creating a centralised backup with windows backup (Windows 2008 only) and then ship the completion logs directly to the same server. Simply make a batch file containing all our severs like this:
winrs -r:{Remote Host} wbadmin start backup -backupTarget:\\{Remote Host}\backup\weeknumber -include:C: -allCritical -vssFull -quiet
hope you enjoy. Please leve a comment if you liked thic article
Make full trust for shared configuration IIS7
Navigate to the "C:\Windows\Microsoft.NET\Framework\v2.0.50727" folder with a command prompt (with elivated permissions) and run the following command:
C:\Windows\Microsoft.NET\Framework\v2.0.50727>caspol -m -ag 1. -url "file://\\1
0.0.0.2\Share\*" FullTrust
Note this has to be done on each server!
To read more about this command look here
for more info about setup of the shared configuration take a look here
Linux commands to test website speed
ngrep -q 'HTTP Error 503' port 80
this command gets all trafic on eth0 and on port 80 that includes the line "HTTP Error 503"
tcpdump -i eth0
gets tcp traffic on eth0
ulimit -n 300000
Sets the max numbers of open files
ab -n 100000 -c 500 http://blog.hviidnet.com/
Benchmarks blog.hviidnet.com with 500 concurent connections 100000 times.. (needs to have apache installed)
How to use findstr with regular expression
By default findstr does the comparison with regular expression. However, what surprised me is that the following command does not work.
findstr "abc|def" test.txt
when test.txt has only abc in it.
According to the online tutorial such as http://www.regular-expressions.info/reference.html, abc|efg should match abc. Why?
The reason is pretty simple, findstr does not support the full range of the regular expression. It does not support ?, {n}.
Some basic things works:
findstr "abc.*" test.txt
findstr "[0-9a-f].*" test.txt