How to Properly Export to CSV Using Powershell

Question

May I know how to properly export this script to CSV?

Try {

    Invoke-Command -scriptblock {Get-EventLog System -After "7/8/2017" -Before "07/28/2017" | 
    Where-Object {$_.EventID -eq "50" -or $_.EventID -eq "51" -or $_.EventID -eq "55" -or $_.EventID -eq "57" -or $_.EventID -eq "6008"} | 
    FT -Property Machinename, TimeWritten, EntryType, Source, EventID, Message -AutoSize -wrap }  -computername $computer -ErrorAction Stop  
}
Catch {
    Write-Host $Computer "Error/RDC Problem" -ForegroundColor Red
}

Result:

Export-CSV command is not working properly when added at the end. It outputs a different set of data.

What do you mean by "not working properly"? I would expect Format-Csv to output all the properties of the objects, whereas Format-Table will often show a subset that will fit on the screen. Format-Csv is going to a format that won't be constrained by the screen width, so it can (and should) include everything. — Joe White
– Joe White, Commented Jul 29, 2017 at 16:13

Patrick Meinecke · Accepted Answer · 2017-07-29 16:33:42Z

2

Formatting cmdlets like Format-Table don't just change the way the object is displayed, it changes the object itself into something that will display how you want it to. This is part of why it's commonly recommended not to use the formatting cmdlets in scripts or functions.

Instead, you should use the Select-Object cmdlet to limit the number of properties passed to Export-Csv.

Invoke-Command -ComputerName $computer -ErrorAction Stop -ScriptBlock {
    Get-EventLog System -After "7/8/2017" -Before "07/28/2017" | 
    Where-Object { 50, 51, 55, 57, 6008 -contains $_.EventID } | 
    Select-Object -Property MachineName, TimeWritten, EntryType, Source, EventID, Message
}

answered Jul 29, 2017 at 16:33

Patrick Meinecke

4,2112 gold badges20 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

KentMarion Over a year ago

It worked! Thank you. Plus points for making the script shorter too, I didn't know you can work with Where-Object like that :)

Esperento57 · Accepted Answer · 2017-07-30 17:30:10Z

1

try this

Try {

    Invoke-Command -scriptblock {Get-EventLog System -After "7/8/2017" -Before "07/28/2017" | 
    Where EventID -in ("50", "51", "55", "57", "6008") | 
    select Machinename, TimeWritten, EntryType, Source, EventID, Message }  -computername $computer -ErrorAction Stop |export-csv "c:\temp\result.csv"  
}
Catch {
    Write-Host $Computer "Error/RDC Problem" -ForegroundColor Red
}

or may be simply like this :

Try 
{
    Get-EventLog System -After "7/8/2017" -Before "07/28/2017" -ComputerName $computer | 
    Where EventID -in ("50", "51", "55", "57", "6008") | 
    select Machinename, TimeWritten, EntryType, Source, EventID, Message |export-csv "c:\temp\result.csv" -NoType
}
Catch 
{
    Write-Host $Computer "Error/RDC Problem" -ForegroundColor Red
}

answered Jul 30, 2017 at 17:30

Esperento57

17.6k6 gold badges42 silver badges47 bronze badges

1 Comment

KentMarion Over a year ago

I didn't think about bringing the Export-CSV command inside the try block. Thank you for this! +1

Collectives™ on Stack Overflow

How to Properly Export to CSV Using Powershell

2 Answers 2

1 Comment

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related