PowerShell command and timestamp reference¶
During data collection, if the objects returned from the PowerShell command have a timestamp field such as TimeAdded or LastModified, the Splunk Add-on for Microsoft SCOM saves a checkpoint file using this timestamp to preserve the last indexed date. When a checkpoint file exists, only data after this date is collected the next time data collection occurs. If the objects returned from the PowerShell command have no timestamp field, the add-on cannot save a checkpoint file and all events are collected every time data collection occurs.
The table below lists all the PowerShell commands used by the add-on for data collection and indicates the timestamp field, if one is available, that is used to create the checkpoint. The commands with no timestamp field do not have a checkpoint.
| Template | Group | PowerShell command | Timestamp field |
|---|---|---|---|
| Performance | None | Get-SCOMAllPerfData | TimeSampled |
| Events | Alert | Get-SCOMAlert | TimeAdded |
| Get-SCOMAlertHistory | TimeAdded | ||
| Monitor | Get-SCOMMonitor | LastModified | |
| Diagnostic | Get-SCOMDiagnostic | LastModified | |
| Task | Get-SCOMTask | LastModified | |
| Get-SCOMTaskResult | LastModified | ||
| Recovery | Get-SCOMRecovery | LastModified | |
| Discovery | Get-SCOMDiscovery | LastModified | |
| Override | Get-SCOMOverride | LastModified | |
| Get-SCOMOverrideResult -Instance (Get-SCOMClassInstance) -Monitor (Get-SCOMMonitor) | None | ||
| Event | Get-SCOMEvent | TimeAdded | |
| Rule | Get-SCOMRule | LastModified | |
| Network | Network | Get-SCOMConnector | Last Modified |
| Get-SCOMAgent | LastModified | ||
| Get-SCOMAgentlessManagedComputer | LastModified | ||
| Get-SCAdvisorProxy | None | ||
| Get-SCOMParentManagementServer -Agent (Get-SCOMAgent) | Last Modified | ||
| Get-SCAdvisorAgent | LastModified | ||
| Get-SCOMADAgentAssignment | None | ||
| Get-SCOMGatewayManagementServer | LastModified | ||
| Management | Management | Get-SCOMManagementPack | LastModified |
| Get-SCOMRunAsAccount | LastModified | ||
| Get-SCOMRunAsProfile | LastModified | ||
| Get-SCOMRunAsDistribution | None | ||
| Get-SCOMHeartbeatSetting | None | ||
| Get-SCOMManagementGroup | None | ||
| Get-SCOMManagementServer | LastModified | ||
| Get-SCOMUserRole | LastModified | ||
| Get-SCOMAlertResolutionSetting | None | ||
| Get-SCOMAlertResolutionState | None | ||
| Get-SCOMManagementGroupConnection | None | ||
| Get-SCOMAccessLicense | None | ||
| Get-SCOMDatabaseGroomingSetting | None | ||
| Get-SCOMDataWarehouseSetting | None | ||
| Get-SCOMErrorReportingSetting | None | ||
| Get-SCOMReportingSetting | None | ||
| Get-SCOMResourcePool | LastModified | ||
| Get-SCOMRMSEmulator | LastModified | ||
| Get-SCOMGroup | LastModified | ||
| Get-SCOMWebAddressSetting | None | ||
| Get-SCOMAgentApprovalSetting | None | ||
| Get-SCOMLocation | LastModified | ||
| Get-SCOMTieredManagementGroup | None | ||
| Get-SCOMNotificationChannel | None | ||
| Get-SCOMNotificationSubscriber | None | ||
| Get-SCOMNotificationSubscription | None | ||
| Get-SCOMMaintenanceMode | LastModified | ||
| Get-SCOMPendingManagement | LastModified | ||
| Get-SCOMTieredManagementGroup | Get-SCOMTierConnector | None | ||
| Internal | Internal | Get-SCOMClass | LastModified |
| Get-SCOMClassInstance | LastModified | ||
| Get-SCOMRelationship | LastModified | ||
| Get-SCOMRelationshipInstance | LastModified | ||
| Get-SCOMMonitoringObject | LastModified |