Commit graph

8 commits

Author SHA1 Message Date
iSazonov baeec066d9 Add support <Suppress> in Get-WinEvent -FilterHashtable (#2506)
* Add support <Suppress> in Get-WinEvent -FilterHashtable

1. Add support <Suppress>
2. Refacrtoring BuildStructuredQueryFromHashTable() to use StringBuilder
3. Add tests

* Changelog
2016-10-27 14:54:14 -07:00
iSazonov 6ef590dee3 Fix Get-WinEvent -FilterHashtable to work with named event data field (#2373)
Fix Get-WinEvent -FilterHashtable to work with named event data field

Now FilterHashtable parameter in Get-WinEvent for named data field:
1. generates a valid query, ex. @{Logname="System";Param="a"}
2. generates a valid query for multiple values, ex.
@{Logname="System";Param="a","b"}

Also removed double cast in the original code and added more tests to cover the fixed scenarios.
2016-10-07 11:48:08 -07:00
James Truher [MSFT] 24f9dea287 Add tests for queries against userdata (#2388)
add a custom evtx file for the userdata tests to use
2016-09-29 16:23:12 -07:00
JamesWTruher bfac47f3f1 Add return in BeforeAll to avoid running get-winevent cmdlet on non-Windows platforms 2016-09-28 14:29:47 -07:00
JamesWTruher f1c854176d Add additional tests for get-winevent for the xpath, xml and hashtable filters
Still left to do is handling the non-System queries (such as UserData)
2016-09-28 14:23:20 -07:00
JamesWTruher 4809414af5 Add new tests for Get-WinEvent 2016-09-28 12:21:56 -07:00
James Truher 9e225ccae2 changes tags for tests
Start using tags CI, Feature, Scenario
2016-07-27 12:06:51 -07:00
Sergei Vorobev 777ba09bce Add a simple test for Get-WinEvent on windows (Core + Full) 2016-07-01 12:20:48 -07:00