{"id":208386,"date":"2024-01-19T14:57:32","date_gmt":"2024-01-19T14:57:32","guid":{"rendered":"https:\/\/www.ninjaone.com\/script-hub\/comment-augmenter-la-taille-du-journal-des-evenements-powershell\/"},"modified":"2024-03-04T18:47:33","modified_gmt":"2024-03-04T18:47:33","slug":"comment-augmenter-la-taille-du-journal-des-evenements-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/fr\/script-hub\/comment-augmenter-la-taille-du-journal-des-evenements-powershell\/","title":{"rendered":"Comment augmenter la taille du journal des \u00e9v\u00e9nements avec PowerShell"},"content":{"rendered":"<p>Les journaux d&rsquo;\u00e9v\u00e9nements des plateformes Windows offrent un aper\u00e7u inestimable du fonctionnement du syst\u00e8me et des \u00e9ventuels probl\u00e8mes. Les professionnels de l&rsquo;informatique ont donc besoin d&rsquo;un moyen d&rsquo;ajuster la taille de ces journaux pour r\u00e9pondre \u00e0 des besoins diff\u00e9rents. Cet article pr\u00e9sente un script PowerShell con\u00e7u sp\u00e9cialement pour ceux qui se demandent <strong>comment augmenter la taille des fichiers journaux d&rsquo;\u00e9v\u00e9nements<\/strong>, afin de garantir que les syst\u00e8mes sont toujours sous bonne surveillance.<\/p>\n<h2>Contexte<\/h2>\n<p>PowerShell, l&rsquo;outil d&rsquo;automatisation des t\u00e2ches de Microsoft, est devenu indispensable pour les professionnels de l&rsquo;informatique du monde entier. Parmi ses nombreuses fonctionnalit\u00e9s, on trouve la possibilit\u00e9 de modifier les configurations du syst\u00e8me, y compris la taille du journal des \u00e9v\u00e9nements. Les syst\u00e8mes g\u00e9n\u00e9rant de grandes quantit\u00e9s de logs au fil du temps, la possibilit\u00e9 d&rsquo;ajuster la capacit\u00e9 de stockage de ces logs est cruciale pour les <a href=\"https:\/\/www.ninjaone.com\/fr\/quest-ce-quun-msp\/\">fournisseurs de services g\u00e9r\u00e9s (MSP)<\/a> et les administrateurs informatiques.<\/p>\n<h2>Le script<\/h2>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\">#Requires -Version 5.1\r\n\r\n&lt;#\r\n.SYNOPSIS\r\n    Changes the max size for the specified Event Logs.\r\n.DESCRIPTION\r\n    Changes the max size for the specified Event Logs.\r\n    Common log names used: Security, Application, System\r\n    To get a list of Event Log names from your system you can run:\r\n        Get-WinEvent -ListLog * | Select-Object LogName\r\n.EXAMPLE\r\n     -LogName Security -MaxSize 50MB\r\n    Changes the max log size for Security to 50MB\r\n.EXAMPLE\r\n     -LogName Security, Application, System -MaxSize 50MB\r\n    Changes the max log size for Security, Application, and System to 50MB\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Windows 10 defaults to 20MB \/ 20480KB\r\n\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes:\r\n    Initial Release\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n#&gt;\r\n\r\n[CmdletBinding(SupportsShouldProcess)]\r\nparam (\r\n    # Event Log name\r\n    # https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.management\/limit-eventlog?view=powershell-5.1#-logname\r\n    [Parameter(Mandatory = $true)]\r\n    [ValidateScript(\r\n        {\r\n            if ( -not $($_ | Where-Object { $_ -in $(Get-WinEvent -ListLog * | Select-Object LogName).LogName }) ) {\r\n                throw \"$_ is not a valid Event Log Name.\"\r\n            }\r\n            else {\r\n                $true\r\n            }\r\n        }\r\n    )]\r\n    [String[]]\r\n    $LogName,\r\n    # The max size of the event log storage in KB.\r\n    # Use KB, MB, or GB after your number like 111MB for example.\r\n    [Parameter(Mandatory = $true)]\r\n    [Int64]\r\n    [ValidateRange(64KB, 4GB)]\r\n    $MaxSize\r\n)\r\n\r\nbegin {\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    \"Used Parameters:\"\r\n    $(\r\n        $PSBoundParameters.Keys | ForEach-Object {\r\n            $Key = $_\r\n            $Value = $PSBoundParameters[\"$_\"] -join ', '\r\n            \"-$Key $Value\"\r\n        }\r\n    ) -join ' '\r\n\r\n    # Look for Event log names that don't exist\r\n    if ($($LogName | ForEach-Object { $_ -notin $(Get-WinEvent -ListLog * | Select-Object LogName).LogName })) {\r\n        $InvalidLogNames = $LogName | Where-Object { $_ -notin $(Get-WinEvent -ListLog * | Select-Object LogName).LogName }\r\n        Write-Error \"Invalid Log Names Found.\"\r\n        Write-Host \"Invalid Log Names: $($InvalidLogNames -join ', ')\"\r\n        exit 1\r\n    }\r\n\r\n    \"Current Log Sizes:\"\r\n    Get-WinEvent -ListLog $LogName | Select-Object LogName, MaximumSizeInBytes | ForEach-Object {\r\n        \"$($_.LogName): $($_.MaximumSizeInBytes \/ 1024)KB\"\r\n    }\r\n}\r\nprocess {\r\n    if ($PSCmdlet.ShouldProcess($($LogName -join ','), \"Limit-EventLog\")) {\r\n        Limit-EventLog -LogName $LogName -MaximumSize $MaxSize -ErrorAction Stop\r\n        # -ErrorAction Stop will exit and return an exit code of 1\r\n        \"Changed Log Sizes to:\"\r\n        Get-WinEvent -ListLog $LogName | Select-Object LogName, MaximumSizeInBytes | ForEach-Object {\r\n            \"$($_.LogName): $($_.MaximumSizeInBytes \/ 1024)KB\"\r\n        }\r\n    }\r\n    else {\r\n        # If -WhatIf was used then print out what the changes would have been.\r\n        \"Would have changed the max log size(s) of: $($LogName -join ',') to $($MaxSize \/ 1024)KB\"\r\n    }\r\n}\r\nend {}<\/pre>\n<p>&nbsp;<\/p>\n\n<div class=\"in-context-cta\"><p style=\"text-align: center;\">Acc\u00e9dez \u00e0 plus de 700 scripts dans le Dojo NinjaOne<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/www.ninjaone.com\/fr\/phase-de-test-gratuit\/\">Obtenez l&rsquo;acc\u00e8s<\/a><\/p>\n<\/div>\n<h2>Description d\u00e9taill\u00e9e<\/h2>\n<p>Le script commence par valider les exigences de son environnement. Ensuite, il effectue :<\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>D\u00e9termination des param\u00e8tres<\/strong>: Les param\u00e8tres permettant de sp\u00e9cifier les noms des journaux (<strong>$LogName<\/strong>) et la taille maximale souhait\u00e9e (<strong>$MaxSize<\/strong>) sont \u00e9tablis.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>V\u00e9rification de l&rsquo;\u00e9l\u00e9vation<\/strong>: Une fonction, <strong>Test-IsElevated<\/strong>, est utilis\u00e9e pour s&rsquo;assurer que le script s&rsquo;ex\u00e9cute avec des droits d&rsquo;administrateur, ce qui est n\u00e9cessaire pour modifier les propri\u00e9t\u00e9s du journal des \u00e9v\u00e9nements.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Validation du nom du journal<\/strong>: Le script v\u00e9rifie que les noms de journaux fournis existent sur le syst\u00e8me \u00e0 l&rsquo;aide de la cmdlet <strong>Get-WinEvent<\/strong>.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Affichage des tailles actuelles<\/strong>: Avant d&rsquo;effectuer des modifications, le script affiche les tailles actuelles des journaux sp\u00e9cifi\u00e9s.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Ajustement de la taille<\/strong>: Si la validation est r\u00e9ussie et que l&rsquo;approbation de l&rsquo;utilisateur est obtenue (avec la v\u00e9rification <strong>$PSCmdlet.ShouldProcess<\/strong>), la cmdlet <strong>Limit-EventLog<\/strong> ajuste la taille des journaux \u00e0 la valeur souhait\u00e9e.<\/li>\n<\/ul>\n<h2>Cas d&rsquo;utilisation potentiels<\/h2>\n<p><strong>\u00c9tude de cas :<\/strong> Imaginez un administrateur informatique d&rsquo;une grande entreprise o\u00f9 les applications cruciales produisent quotidiennement une grande quantit\u00e9 de logs. R\u00e9guli\u00e8rement, le journal des applications se remplit, ce qui fait que les \u00e9v\u00e9nements les plus r\u00e9cents submergent les plus anciens. Gr\u00e2ce \u00e0 ce script, l&rsquo;administrateur peut facilement augmenter la taille du journal des applications afin de s&rsquo;assurer que les donn\u00e9es importantes ne sont pas perdues.<\/p>\n<h2>Comparaisons<\/h2>\n<p>Traditionnellement, pour augmenter la taille du journal des \u00e9v\u00e9nements, il fallait naviguer dans l&rsquo;interface graphique de l&rsquo;observateur d&rsquo;\u00e9v\u00e9nements, cliquer avec le bouton droit de la souris sur le journal souhait\u00e9, s\u00e9lectionner \u00ab\u00a0Propri\u00e9t\u00e9s\u00a0\u00bb, puis ajuster la taille. Le script offre une alternative automatis\u00e9e, efficace et qui r\u00e9duit les erreurs. Il permet \u00e9galement d&rsquo;effectuer des ajustements par groupes, ce qui n&rsquo;est pas facile \u00e0 r\u00e9aliser avec les m\u00e9thodes manuelles.<\/p>\n<h2>FAQ<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Puis-je utiliser ce script pour r\u00e9duire la taille du journal des \u00e9v\u00e9nements ?<\/strong><br \/>\nOui, sp\u00e9cifiez une taille inf\u00e9rieure \u00e0 la taille actuelle.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Que se passe-t-il si je sp\u00e9cifie un nom de journal non valide ?<\/strong><br \/>\nLe script fournit un message d&rsquo;erreur, puis se termine.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Que faire si je veux voir ce que fait le script sans le modifier ?<\/strong><br \/>\nUtilisez le commutateur <strong>-WhatIf<\/strong> lors de l&rsquo;ex\u00e9cution, et le script affichera les actions sans les ex\u00e9cuter.<\/li>\n<\/ul>\n<h2>Implications<\/h2>\n<p>Bien que l&rsquo;augmentation de la taille des journaux permet d&rsquo;assurer la conservation des donn\u00e9es vitales, elle a \u00e9galement des cons\u00e9quences sur le stockage. Si les lecteurs du syst\u00e8me sont proches de leur capacit\u00e9 et que les journaux sont augment\u00e9s de mani\u00e8re significative, il peut en r\u00e9sulter des probl\u00e8mes de manque d&rsquo;espace. De plus, les fichiers journaux volumineux peuvent avoir un l\u00e9ger impact sur la vitesse de certaines requ\u00eates.<\/p>\n<h2>Recommandations<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\">Surveillez r\u00e9guli\u00e8rement votre espace de stockage apr\u00e8s avoir augment\u00e9 la taille des journaux.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\">N&rsquo;ajustez la taille des journaux que si cela est n\u00e9cessaire et si vous en comprenez clairement la raison.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\">Les journaux, en particulier le journal de s\u00e9curit\u00e9, doivent toujours \u00eatre surveill\u00e9s afin d&rsquo;identifier les menaces potentielles pour la s\u00e9curit\u00e9.<\/li>\n<\/ul>\n<h2>Conclusions<\/h2>\n<p>Pour les MSP et les professionnels de l&rsquo;informatique, des outils tels que NinjaOne peuvent s&rsquo;av\u00e9rer cruciaux pour la <a href=\"https:\/\/www.ninjaone.com\/blog\/linux-log-management-best-practices\/\">gestion des journaux<\/a> et les t\u00e2ches connexes. NinjaOne, int\u00e9gr\u00e9 \u00e0 des scripts tels que celui-ci, peut simplifier davantage la gestion du syst\u00e8me, ce qui permet de garantir plus facilement que jamais le fonctionnement et la s\u00e9curit\u00e9 du syst\u00e8me.<\/p>\n","protected":false},"author":35,"featured_media":144386,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_lmt_disableupdate":"no","_lmt_disable":""},"operating_system":[4212],"use_cases":[4281],"class_list":["post-208386","script_hub","type-script_hub","status-publish","has-post-thumbnail","hentry","script_hub_category-windows","use_cases-configuration-generale"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/script_hub\/208386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/script_hub"}],"about":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/types\/script_hub"}],"author":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/comments?post=208386"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/media\/144386"}],"wp:attachment":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/media?parent=208386"}],"wp:term":[{"taxonomy":"script_hub_category","embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/operating_system?post=208386"},{"taxonomy":"use_cases","embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/use_cases?post=208386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}