PowerShell command/timestamp reference

During data collection, if the objects returned from the PowerShell command have a timestamp field such as TimeAdded or LastModified, the Splunk Add-on for Microsoft SCOM saves a checkpoint file using this timestamp to preserve the last indexed date. When a checkpoint file exists, only data after this date is collected the next time data collection occurs. If the objects returned from the PowerShell command have no timestamp field, the add-on cannot save a checkpoint file and all events are collected every time data collection occurs.

The table below lists all the PowerShell commands used by the add-on for data collection and indicates the timestamp field, if one is available, that is used to create the checkpoint. The commands with no timestamp field do not have a checkpoint.

Template	Group	PowerShell command	Timestamp field
Performance	None	Get-SCOMAllPerfData	TimeSampled
Events	Alert	Get-SCOMAlert	TimeAdded
		Get-SCOMAlertHistory	TimeAdded
	Monitor	Get-SCOMMonitor	LastModified
	Diagnostic	Get-SCOMDiagnostic	LastModified
	Task	Get-SCOMTask	LastModified
		Get-SCOMTaskResult	LastModified
	Recovery	Get-SCOMRecovery	LastModified
	Discovery	Get-SCOMDiscovery	LastModified
	Override	Get-SCOMOverride	LastModified
		Get-SCOMOverrideResult -Instance (Get-SCOMClassInstance) -Monitor (Get-SCOMMonitor)	None
	Event	Get-SCOMEvent	TimeAdded
	Rule	Get-SCOMRule	LastModified
Network	Network	Get-SCOMConnector	Last Modified
		Get-SCOMAgent	LastModified
		Get-SCOMAgentlessManagedComputer	LastModified
		Get-SCAdvisorProxy	None
		Get-SCOMParentManagementServer -Agent (Get-SCOMAgent)	Last Modified
		Get-SCAdvisorAgent	LastModified
		Get-SCOMADAgentAssignment	None
		Get-SCOMGatewayManagementServer	LastModified
Management	Management	Get-SCOMManagementPack	LastModified
		Get-SCOMRunAsAccount	LastModified
		Get-SCOMRunAsProfile	LastModified
		Get-SCOMRunAsDistribution	None
		Get-SCOMHeartbeatSetting	None
		Get-SCOMManagementGroup	None
		Get-SCOMManagementServer	LastModified
		Get-SCOMUserRole	LastModified
		Get-SCOMAlertResolutionSetting	None
		Get-SCOMAlertResolutionState	None
		Get-SCOMManagementGroupConnection	None
		Get-SCOMAccessLicense	None
		Get-SCOMDatabaseGroomingSetting	None
		Get-SCOMDataWarehouseSetting	None
		Get-SCOMErrorReportingSetting	None
		Get-SCOMReportingSetting	None
		Get-SCOMResourcePool	LastModified
		Get-SCOMRMSEmulator	LastModified
		Get-SCOMGroup	LastModified
		Get-SCOMWebAddressSetting	None
		Get-SCOMAgentApprovalSetting	None
		Get-SCOMLocation	LastModified
		Get-SCOMTieredManagementGroup	None
		Get-SCOMNotificationChannel	None
		Get-SCOMNotificationSubscriber	None
		Get-SCOMNotificationSubscription	None
		Get-SCOMMaintenanceMode	LastModified
		Get-SCOMPendingManagement	LastModified
		Get-SCOMTieredManagementGroup | Get-SCOMTierConnector	None
Internal	Internal	Get-SCOMClass	LastModified
		Get-SCOMClassInstance	LastModified
		Get-SCOMRelationship	LastModified
		Get-SCOMRelationshipInstance	LastModified
		Get-SCOMMonitoringObject	LastModified