Translating Event IDs (Sample Script)

Intel AMT Features > WS-Eventing > Detailed Description > Translating Event IDs (Sample Script)

Translating Event IDs (Sample Script)

The Intel SDK includes a Microsoft Windows PowerShell sample script that translates a
WS-Eventing Event ID into a message string that describes the event.

The sample is located at:<SDK_Root>:\Docs\Scripts\Alert Messages

The sample includes the following:

• EventIDParser.ps1 – A script that parses an xml file containing the Event IDs and their equivalent message strings. The xml filename and the Event ID are supplied as parameters.

• ENG.xml – An xml file containing the Event IDs and their message strings in English. This is the default. EventIDParser.ps1 also accepts several other filenames that can contain the message strings in different languages.

This is the syntax:

EventIDParser.ps1 –id <eventid> [-lang <language>] –arg <argument> [-help]

Parameter	Description
-id <eventid>	The Event ID from the MessageID field. Note: The <eventid> variable is case sensitive and must be in the format iAMTxxxx or PLATxxxx.
-lang <language>	The language in which to display the message.
-arg <argument>	For events with more than one possible message, enter the value from the MessageArguments field. Enter an integer value (not Hexadecimal). If the value is a string, enclose the string in double quotes “ “.
-help	Displays help.

This example shows how to run the script from the PowerShell command prompt in the Alert Messages folder using the .\ notation.

PS C:\SDK\Docs\Alert Messages> .\EventIDParser.ps1 -id iAMT0033

EventID: iAMT0033

Message: Audit log storage is full

PS C:\SDK\Docs\Alert Messages>

Note:

• Ensure that the PowerShell execution policy is not set to Restricted (the default). To view the execution policy, type the following at the PowerShell command prompt:
Get-ExecutionPolicy.

• For information about running PowerShell scripts, refer to the following page in the Microsoft TechNet site: Running Windows PowerShell Scripts.