Splunk® Supported Add-ons

Splunk Add-on for Microsoft SCOM

Download manual as PDF

Download topic as PDF

PowerShell command/timestamp reference

During data collection, if the objects returned from the PowerShell command have a timestamp field such as TimeAdded or LastModified, the Splunk Add-on for Microsoft SCOM saves a checkpoint file using this timestamp to preserve the last indexed date. When a checkpoint file exists, only data after this date is collected the next time data collection occurs. If the objects returned from the PowerShell command have no timestamp field, the add-on cannot save a checkpoint file and all events are collected every time data collection occurs.

The table below lists all the PowerShell commands used by the add-on for data collection and indicates the timestamp field, if one is available, that is used to create the checkpoint. The commands with no timestamp field do not have a checkpoint.

Template Group PowerShell command Timestamp field
Performance None Get-SCOMAllPerfData TimeSampled
Events Alert Get-SCOMAlert TimeAdded
Get-SCOMAlertHistory TimeAdded
Monitor Get-SCOMMonitor LastModified
Diagnostic Get-SCOMDiagnostic LastModified
Task Get-SCOMTask LastModified
Get-SCOMTaskResult LastModified
Recovery Get-SCOMRecovery LastModified
Discovery Get-SCOMDiscovery LastModified
Override Get-SCOMOverride LastModified
Get-SCOMOverrideResult -Instance (Get-SCOMClassInstance) -Monitor (Get-SCOMMonitor) None
Event Get-SCOMEvent TimeAdded
Rule Get-SCOMRule LastModified
Network Network Get-SCOMConnector Last Modified
Get-SCOMAgent LastModified
Get-SCOMAgentlessManagedComputer LastModified
Get-SCAdvisorProxy None
Get-SCOMParentManagementServer -Agent (Get-SCOMAgent) Last Modified
Get-SCAdvisorAgent LastModified
Get-SCOMADAgentAssignment None
Get-SCOMGatewayManagementServer LastModified
Management Management Get-SCOMManagementPack LastModified
Get-SCOMRunAsAccount LastModified
Get-SCOMRunAsProfile LastModified
Get-SCOMRunAsDistribution None
Get-SCOMHeartbeatSetting None
Get-SCOMManagementGroup None
Get-SCOMManagementServer LastModified
Get-SCOMUserRole LastModified
Get-SCOMAlertResolutionSetting None
Get-SCOMAlertResolutionState None
Get-SCOMManagementGroupConnection None
Get-SCOMAccessLicense None
Get-SCOMDatabaseGroomingSetting None
Get-SCOMDataWarehouseSetting None
Get-SCOMErrorReportingSetting None
Get-SCOMReportingSetting None
Get-SCOMResourcePool LastModified
Get-SCOMRMSEmulator LastModified
Get-SCOMGroup LastModified
Get-SCOMWebAddressSetting None
Get-SCOMAgentApprovalSetting None
Get-SCOMLocation LastModified
Get-SCOMTieredManagementGroup None
Get-SCOMNotificationChannel None
Get-SCOMNotificationSubscriber None
Get-SCOMNotificationSubscription None
Get-SCOMMaintenanceMode LastModified
Get-SCOMPendingManagement LastModified
Get-SCOMTieredManagementGroup | Get-SCOMTierConnector None
Internal Internal Get-SCOMClass LastModified
Get-SCOMClassInstance LastModified
Get-SCOMRelationship LastModified
Get-SCOMRelationshipInstance LastModified
Get-SCOMMonitoringObject LastModified
Troubleshoot the Splunk Add-on for Microsoft SCOM
Lookups for the Splunk Add-on for Microsoft SCOM

This documentation applies to the following versions of Splunk® Supported Add-ons: released

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters