It-fagfolk kan være nødt til at trække logfiler fra en eller flere computere for at diagnosticere et problem. Dette gøres bedst gennem fjernstyringsværktøjer, men kan gøres gennem scripting. Afsnittet Vedhæftede filer i denne artikel indeholder eksempler på logindsamlere, der kan køres eller ændres, så de opfylder de fleste behov.
Scriptoplysninger:
C:\Users\<Current User>\AppData\Roaming\
9af4c403c997dcebdba49b6251565a5c
3a8bb6d3a75ebe14ffc631fe68dcfa308eaf3691
4917c7f2e0d8d6111159cfe18b8dc9ca6cf04ff4467166d65435e3b8e07a5e2b
.cmd
Filen vises som et Notesblok-ikon og åbnes som Notesblok, når du dobbeltklikker
.cmd
og andre scriptfiler..bat
fil i stedet?
.cmd
og .bat
filer, der indeholder kontekst- og sikkerhedsforskelle..cmd
..bat
..txt
filen indeholder?
Log indsamlet | ZIP-logsti | Kommando brugt | Kræver administrator | Kommandotype | URL-adresse til Microsoft/Dell | 2.3 Ændringer |
---|---|---|---|---|---|---|
Programhændelseslogfiler | \Logs\OperatingSystem\Event Logs\application_eventlog.evtx |
wevtutil epl Application /q:"*[System[(Level<=5)]]" application_eventlog.evtx |
Nej | Kommandolinje | https://learn.microsoft.com/windows/win32/wes/windows-event-log |
0 |
Appx-pakkeliste | \Logs\Application\installed_appx.txt |
Get-AppxPackage | Select PackageFullName | Sort PackageFullName |
Ja | PowerShell | https://learn.microsoft.com/powershell/module/appx/get-appxpackage?view=windowsserver2022-ps |
0 |
Tilgængelig liste over søvntilstande | \Logs\Power\available_sleepstates.txt |
powercfg /a |
Nej | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Batterirapport | \Logs\Power\Battery_Report.html |
powercfg /batteryreport /output Battery_Report.html /duration 14 |
Ja | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
BCD-oplysninger | \Logs\OperatingSystem\bcd.txt |
bcdedit |
Ja | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/bcdedit |
0 |
Liste over BitLocker-beskytter | \Logs\Security\bitlocker_PCRs.txt |
manage-bde %SYSTEMDRIVE% -protectors -get -type TPM |
Ja | PowerShell | https://learn.microsoft.com/windows-server/administration/windows-commands/manage-bde |
0 |
BitLocker-status | \Logs\Security\bitlocker_status.txt |
manage-bde -status |
Ja | PowerShell | https://learn.microsoft.com/windows-server/administration/windows-commands/manage-bde |
0 |
Liste over bredbåndsadaptere | \Logs\Network\broadband_adapter.txt |
netsh mbn show interfaces |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/networking/technologies/netsh/netsh-contexts |
0 |
Liste over konfigurerede vækningstimer | \Logs\Power\waketimers.txt |
powercfg /waketimers |
Ja | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Dell Command-opdateringslog | \Logs\Dell\Dell_Command_Update\Activity.log |
XCOPY /s /y /q /F %SYSTEMDRIVE%\ProgramData\Dell\UpdateService\Log |
Ja | Kommandolinje | Dell Command | Update | 0 |
Dell Data Migrate-logfiler (destination) | \Logs\Dell\Dell_Data_Migrate_Destination\(Various files) |
XCOPY /s /I /y /q /F %SYSTEMDRIVE%\ProgramData\Dell\SupportAssist\CDM\Logs . |
Ja | Kommandolinje | https://www.dell.com/support/manuals/data-assistant/migrate_1.0_ug/ | 0 |
Dell Data Migrate-logfiler (kilde) | \Logs\Dell\Dell_Data_Migrate_Source\(Various Files) |
XCOPY /s /y /q /F %SYSTEMDRIVE%\ProgramData\DDA\logs\ . |
Ja | Kommandolinje | https://www.dell.com/support/manuals/data-assistant/migrate_1.0_ug/introduction?guid=guid-28c0bb91-e84d-4118-99ee-e5500769b170& | 0 |
Dell Digital Delivery-logfiler | \Logs\Dell\Dell_Digital_Delivery\ |
XCOPY /s /y /q /F %SYSTEMDRIVE%\ProgramData\dell\D3\Resources\Logs\ |
Ja | Kommandolinje | https://www.dell.com/support/contents/article/product-support/self-support-knowledgebase/software-and-downloads/download-center/dell-digital-delivery | 0 |
Oplysninger om Dell-fabriksindlæsning | \Logs\Dell\FactoryLoad\dell.sdr |
XCOPY /y /q /F %SYSTEMDRIVE%\dell.sdr |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/xcopy |
0 |
Dell Optimizer-logfiler | \Logs\Dell\Dell_Optimizer\* |
*XCOPY command copies multiple AppData files specific to Dell Optimizer* |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/xcopy |
1 |
Dell Update-pakkelogfiler | \Logs\Dell\Dell_Update_Package\* |
XCOPY /s /y /q /F %SYSTEMDRIVE%\ProgramData\Dell\UpdatePackage\Log . |
Nej | Kommandolinje | Dell Command | Update | 0 |
Detaljeret driverrapport | \Logs\Driver\driver_details.txt |
Get-WmiObject Win32_PnPSignedDriver | select * |
Nej | PowerShell | https://learn.microsoft.com/previous-versions/windows/desktop/legacy/aa394354(v=vs.85) |
0 |
DirectX-diagnosticeringslog | \Logs\Graphics\DXdiag.txt |
dxdiag.exe /t DXdiag.txt |
Nej | Kommandolinje | https://support.microsoft.com/windows/open-and-run-dxdiag-exe-dad7792c-2ad5-f6cd-5a37-bf92228dfd85 |
0 |
Liste over drivere | \Logs\Driver\driver_list.txt |
Get-WmiObject Win32_PnPSignedDriver| select devicename, driverversion, driverdate | Sort-Object devicename |
Nej | PowerShell | https://learn.microsoft.com/previous-versions/windows/desktop/legacy/aa394354(v=vs.85) |
0 |
Driver Store List | \Logs\Driver\driver_store.txt |
dism /online /get-drivers /all /format:table |
Ja | Kommandolinje | https://learn.microsoft.com/windows-hardware/manufacture/desktop/what-is-dism?view=windows-11 |
0 |
Drivere i fejltilstand | \Logs\Driver\error_state_drivers.txt |
Pnputil /enum-devices /problem /ids |
Nej | Kommandolinje | https://learn.microsoft.com/windows-hardware/drivers/devtest/pnputil |
1 |
Energirapport | \Logs\Power\energy.html |
powercfg /energy /output energy.html |
Ja | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Gruppepolitikobjekter | \Logs\OperatingSystem\GPO_List.html |
start /min gpresult /H GPO_List.html |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/gpresult |
0 |
Liste over installerede programmer | \Logs\Application\installed_apps.txt |
Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate | Sort-Object InstallDate |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/microsoft.powershell.management/get-itemproperty?view=powershell-7.3 |
0 |
IP-konfiguration | \Logs\Network\ipconfig_all.txt |
ipconfig /all |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/ipconfig |
0 |
Last Wake-udløser | \Logs\Power\lastwake.txt |
powercfg /lastwake |
Nej | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Hukommelsesdump (fuld kerne) | \Logs\MemoryDumps\memory.dmp |
XCOPY /y /q /F %SYSTEMROOT%\memory.dmp |
Nej | Kommandolinje | https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/xcopy |
0 |
Hukommelsesdump (minidump) | \Logs\MemoryDumps\*.dmp |
XCOPY /s /I /y /q /F %SYSTEMROOT%\minidump\*.dmp |
Ja | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/xcopy |
0 |
Hukommelsesdump (status/oplysninger) | \Logs\Operating System\DumpStatus.txt |
IF EXIST %SYSTEMROOT%\memory.dmp |
Ja | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/if |
0 |
Status for hukommelsesadministration | \Logs\System\MemoryManagement.html |
Get-mmagent | Out-File MemoryManagement.html |
Ja | PowerShell | https://learn.microsoft.com/powershell/module/mmagent/get-mmagent?view=windowsserver2022-ps |
1 |
Systemoplysninger for Microsoft (MSinfo32) | \Logs\OperatingSystem\msinfo32.nfo |
start msinfo32 /nfo msinfo32.nfo |
Nej | Kommandolinje | https://support.microsoft.com/topic/description-of-microsoft-system-information-msinfo32-exe-tool-10d335d8-5834-90b4-8452-42c58e61f9fc |
0 |
Skærmoplysninger | \Logs\Graphics\monitor.txt |
Get-CimInstance -Namespace root\wmi -ClassName WmiMonitorID | ForEach-Object {if ($_.UserFriendlyNameLength -gt 0) {($_.ManufacturerName -ne 0 | foreach {[char]$_}) + [char] 10 + 'InstanceName: ' + ($_.InstanceName) + [char] 10 + ($_.UserFriendlyName -ne 0 | foreach {[char]$_}) + [char] 10 + 'Serial: ' + ($_.SerialNumberID -ne 0 | foreach {[char]$_}) + [char] 10 + 'ProdCodeID: ' + ($_.ProductCodeID -ne 0 | foreach {[char]$_}) + [char] 10 + 'WeekOfManufacture:' + $_.WeekOfManufacture + [char] 10 + 'YearOfManufacture:' + $_.YearOfManufacture + [char] 10 + 'DisplayActive:' + $_.Active + [char] 10 -join ''} else{($_.ManufacturerName -ne 0 | foreach {[char]$_}) + [char] 10 + 'InstanceName: ' + ($_.InstanceName) + [char] 10 + ('No Model (Likely Internal LCD)') + [char] 10 + 'Serial: ' + ($_.SerialNumberID -ne 0 | foreach {[char]$_}) + [char] 10 + 'ProdCodeID: ' + ($_.ProductCodeID -ne 0 | foreach {[char]$_}) + [char] 10 + 'WeekOfManufacture:' + $_.WeekOfManufacture + [char] 10 + 'YearOfManufacture:' + $_.YearOfManufacture + [char] 10 + 'DisplayActive:' + $_.Active + [char] 10 -join ''}} |
Nej | Nej | https://learn.microsoft.com/windows/win32/wmicoreprov/wmimonitorid |
0 |
Netværksadapter Avanceret egenskabslog | \Logs\Network\net_adapter_adv_properties.txt |
Get-NetAdapterAdvancedProperty |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/netadapter/get-netadapteradvancedproperty?view=windowsserver2022-ps |
0 |
OS-version & installationsdato | \Logs\LogCollectorStatus.txt |
(Get-WMIObject -class Win32_ComputerSystem | Select-Object Model| Format-List | Out-string).Trim(); (Get-WMIObject -class Win32_OperatingSystem | Select-Object Caption, Version| Format-List| Out-string).Trim(); (Write-Output 'OS Install Date:').Trim(); ((Get-Item 'C:\Windows\system.ini').CreationTime | Out-String).Trim() |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-operatingsystem |
0 |
PnP-enhedsliste | \Logs\Operating System\pnp_devices.txt |
Get-CimInstance Win32_PnPEntity |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-pnpentity |
0 |
Anmodninger om strøm | \Logs\Power\power_requests.txt |
powercfg /requests |
Ja | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Oplysninger om strømstyringsskema | \Logs\Power\powerschemes.txt |
powercfg /query |
Nej | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Liste over strømstyringsskemaer | \Logs\Power\power_schemes.html |
powercfg /list |
Nej | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Liste over processer | \Logs\OperatingSystem\ processes.txt |
Get-WmiObject -Class Win32_Service | Select-Object -Property Name, ProcessID |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/scheduledtasks/get-scheduledtask?view=windowsserver2022-ps |
0 |
Klargøringspakker | \Logs\Application\installed_provisioning_packages.txt |
Get-ProvisioningPackage |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/provisioning/get-provisioningpackage?view=windowsserver2022-ps |
0 |
Liste over planlagte opgaver | \Logs\OperatingSystem\taskscheduler.txt |
Get-ScheduledTask | Where State -ne "Disabled" | Get-ScheduledTaskInfo |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/scheduledtasks/get-scheduledtask?view=windowsserver2022-ps |
0 |
Servicekode | Part of File Name |
Get-CimInstance -ClassName Win32_BIOS -Property SerialNumber | Select-Object -ExpandProperty SerialNumber |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-bios |
0 |
ID-nummer for servicekode og baseboard | \Logs\System\System_Board.txt |
Get-CimInstance -ClassName Win32_BaseBoard | Format-List |
Nej | PowerShell | https://www.dell.com/support/manuals/data-assistant/migrate_1.0_ug/introduction?guid=guid-28c0bb91-e84d-4118-99ee-e5500769b170 | 1 |
Liste over tjenester | \Logs\OperatingSystem\services.txt |
Get-Service | Sort Status |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/microsoft.powershell.management/get-service?view=powershell-7.3 |
0 |
Rapport om søvnundersøgelse | \Logs\Power\sleepstudy.html |
powercfg /sleepstudy /output sleepstudy.html |
Ja | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Liste over opstartsprocesser | \Logs\Application\startup_processes.txt |
Get-CimInstance Win32_StartupCommand | Select-Object Name, command, Location, User | Format-List |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-startupcommand |
0 |
Liste over lagerenheder | \Logs\Storage\Disk_Drives.txt |
Get-CimInstance -ClassName Win32_DiskDrive | select * | Format-List |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-diskdrive |
0 |
Storageenheder | \Logs\Storage\Disk_Volumes.txt |
Get-CimInstance -ClassName Win32_DiskPartition | Format-List |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/Win32-DiskPartition |
0 |
Systemmodel | Part of File Name |
Get-WMIObject -class Win32_ComputerSystem | Select-Object -ExpandProperty Model |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-computersystem |
0 |
TPM-oplysninger | \Logs\Security\tpm.txt |
get-tpm |
Ja | PowerShell | https://learn.microsoft.com/powershell/module/trustedplatformmodule/get-tpm?view=windowsserver2022-ps |
0 |
Liste over USB-enheder | \Logs\USB\usb_devices.txt |
gwmi Win32_USBControllerDevice |%%{[wmi]($_.Dependent)} | Sort Manufacturer,Name,Description,DeviceID | Ft -GroupBy Manufacturer Name,Description,Service,DeviceID |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-usbcontrollerdevice |
0 |
Oplysninger om skærmkort | \Logs\Graphics\video.txt |
Get-WmiObject win32_videocontroller | select * |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-videocontroller |
0 |
Oplysninger om videoopløsning | \Logs\Graphics\video.txt |
Get-WmiObject win32_videocontroller | select caption, CurrentHorizontalResolution, CurrentVerticalResolution, CurrentRefreshRate, DriverVersion |
Nej | PowerShell | https://learn.microsoft.com/windows/win32/cimwin32prov/win32-videocontroller |
0 |
Liste over vækkede enheder | \Logs\Power\device_wake_armed.html |
powercfg -devicequery wake_armed |
Nej | Kommandolinje | https://learn.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options |
0 |
Windows-systemhændelseslogs | \Logs\OperatingSystem\Event Logs\system_eventlog.evtx |
wevtutil epl System /q:"*[System[(Level<=5)]]" system_eventlog.evtx |
Nej | Kommandolinje | https://learn.microsoft.com/windows/win32/wes/windows-event-log |
0 |
Windows Systeminfo-log | \Logs\LogCollectorStatus.txt |
Systeminfo |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/administration/windows-commands/systeminfo |
0 |
Windows Update-liste | \Logs\OperatingSystem\WindowsUpdateLog.txt |
Get-WindowsUpdateLog |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/windowsupdate/get-windowsupdatelog?view=windowsserver2022-ps |
0 |
Windows Update-log | \Logs\OperatingSystem\hotfixes.txt |
Get-hotfix |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/microsoft.powershell.management/get-hotfix?view=powershell-7.3 |
0 |
Liste over kabelbaserede netværk | \Logs\Network\current_wired_network_interfaces.txt |
netsh lan show interfaces |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/networking/technologies/netsh/netsh-contexts |
0 |
Kabelbaserede netværksprofiler | \Logs\Network\wired_profiles.txt |
netsh lan show profiles |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/networking/technologies/netsh/netsh-contexts |
0 |
Indstillinger for kablet netværk | \Logs\Network\wired_settings.txt |
netsh lan show settings |
Nej | Kommandolinje | https://learn.microsoft.com/windows-server/networking/technologies/netsh/netsh-contexts |
0 |
Trådløse rapporter | \Logs\Network\wlan-report-latest.html |
netsh wlan show wlanreport duration=30 && copy /y %ProgramData%\microsoft\windows\wlanreport\wlan-report-latest.html . && copy /y %ProgramData%\Microsoft\Windows\wlanreport\wlan-report-latest.cab . |
Ja | Kommandolinje | https://learn.microsoft.com/windows-server/networking/technologies/netsh/netsh-contexts |
0 |
Windows-opgradering/-opdatering | \Logs\OperatingSystem\windows_upgrade_history |
get-itemproperty -path 'HKLM:\SYSTEM\Setup\Source OS*' | SELECT PSChildName, Productname, ReleaseId, DisplayVersion, CurrentBuild |
PowerShell | https://learn.microsoft.com/powershell/module/microsoft.powershell.management/get-itemproperty?view=powershell-7.4 |
1 | |
Komprimering af skærmstream | Logs\Graphics\Display_Stream_Compression_status.txt |
REG QUERY HKLM\SYSTEM\CurrentControlSet\Control\Class /s /v DPMstDscDisable > Display_Stream_Compression_status.txt |
Nej | PowerShell | https://learn.microsoft.com/windows-server/administration/windows-commands/reg-query |
1 |
PCIe-enheds genererings- og linkhastighed | \Logs\System\PCIe_Device_Info.txt |
(Get-WMIObject Win32_Bus -Filter 'DeviceID like "PCI%%"').GetRelated('Win32_PnPEntity') | foreach { [pscustomobject][ordered]@{Name = $_.Name; ExpressSpecVersion=$_.GetDeviceProperties('DEVPKEY_PciDevice_ExpressSpecVersion').deviceProperties.data;MaxLinkSpeed=$_.GetDeviceProperties('DEVPKEY_PciDevice_MaxLinkSpeed').deviceProperties.data; MaxLinkWidth=$_.GetDeviceProperties('DEVPKEY_PciDevice_MaxLinkWidth').deviceProperties.data; CurrentLinkSpeed=$_.GetDeviceProperties('DEVPKEY_PciDevice_CurrentLinkSpeed').deviceProperties.data; CurrentLinkWidth=$_.GetDeviceProperties('DEVPKEY_PciDevice_CurrentLinkWidth' ).deviceProperties.data} | Where MaxLinkSpeed } | Format-Table -AutoSize; |
Nej | PowerShell | https://learn.microsoft.com/powershell/module/microsoft.powershell.management/get-wmiobject?view=powershell-5.1 |
1 |
BIOS-indstillinger | \Logs\System\BIOS_Settings.txt |
Get-CimInstance -Namespace root\dcim\sysman\biosattributes -ClassName EnumerationAttribute | Select-Object AttributeName, CurrentValue, Defaultvalue, PossibleValue |
Ja | PowerShell | https://learn.microsoft.com/powershell/module/cimcmdlets/get-ciminstance?view=powershell-7.4 |
1 |
Dell-kommandoignoreringsliste | \Logs\Dell\Dell_Command_Update\Update_Ignore_List.txt |
REG QUERY HKLM\SOFTWARE\DELL\UpdateService\Service\IgnoreList /s /v InstalledUpdateJson |
Nej | PowerShell | https://learn.microsoft.com/windows-server/administration/windows-commands/reg-query |
1 |
Indstillinger for Dell Optimizer | \Logs\Dell\Dell_Optimizer\user_settings.txt |
do-cli /get |
Nej | Kommandolinje | https://www.dell.com/support/manuals/dell-optimizer/dell-optimizer-4.0_ug/command-line-interface-for-dell-optimizer?guid=guid-a82481c9-8abf-4a15-9f2b-6011e36c6b19& |
1 |