PowerTip: Use PowerShell to report on BlueScreens

by Mitch Tulloch [Published on 8 Jan. 2014 / Last Updated on 8 Jan. 2014]

A tip on how to use Windows PowerShell to report on BlueScreens.

Here's a tip from my colleague Ed Wilson (a.k.a. The Scripting Guy at Microsoft) that shows you how to use Windows PowerShell to report on BlueScreens.

Question: You have a user complaining of receiving the ‘Blue Screen of Death’ all the time. How can you use Windows PowerShell to determine actual frequency of occurances?

Answer: Use the Get-EventLog cmdlet to check the application log for a source from ‘Windows Error *’. Choose the timewritten and the message properties, filter on the word ‘bluescreen’ and sent the contents to a table for ease of viewing. This technique appears here.

Get-EventLog -LogName application -Newest 100 -Source 'Windows Error*' |

select timewritten, message | where message -match 'bluescreen' |  ft -auto -wrap

Ed Wilson is the bestselling author of eight books about Windows Scripting, including Windows PowerShell 3.0 Step by Step, and Windows PowerShell 3.0 First Steps. He writes a daily blog about Windows PowerShell call Hey, Scripting Guy! that is hosted on the Microsoft TechNet Script Center; for more PowerTips check out the Hey, Scripting Guy! blog.

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see www.mtit.com .

Latest Contributions

Featured Links