N-ableScripts/Test-TransportServerBackPressure.ps1 at master · lucashalbert/N-ableScripts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
<#
.SYNOPSIS
Test-TransportServerBackPressure.ps1 - Script to check Transport Servers for Back Pressure.
.DESCRIPTION
Checks the event logs of Hub Transport servers for "back pressure" events.
.OUTPUTS
Results are output to the PowerShell window.
.PARAMETER server
Perform a check of a single server
.PARAMETER hours
Specify the number of hours to look back in the event log
.EXAMPLE
.\Test-TransportServerBackPressure.ps1
Checks all Hub Transport servers in the organization and outputs the results to the shell window.
.EXAMPLE
.\Test-TransportServerBackPressure.ps1 -server HO-EX2010-MB1
Checks the server HO-EX2010-MB1 and outputs the results to the shell window.
.EXAMPLE
.\Test-TransportServerBackPressure.ps1 -server HO-EX2010-MB1 -hours 24
Checks the server HO-EX2010-MB1 for the previous 24 hours and outputs the results to the shell window.
.LINK
http://exchangeserverpro.com/powershell-script-check-hub-transport-servers-for-back-pressure-events
.NOTES
Written by: Paul Cunningham
Find me on:
* My Blog:	https://paulcunningham.me
* Twitter:	https://twitter.com/paulcunningham
* LinkedIn:	https://au.linkedin.com/in/cunninghamp/
* Github:	https://github.com/cunninghamp
Modified by: Lucas Halbert
Date: 02/14/2019
Changes: Add the 'hours' parameter to allow specification of hours to look back in the event log.
         Add state output.
Find me on:
* Website:  https://www.lhalbert.xyz/
* Twitter:  https://twitter.com/lucashalbert
* LinkedIn: https://www.linkedin.com/in/lucashalbert/
* Github:   https://github.com/lucashalbert
#>

#requires -version 2

Param(
	[Parameter( Mandatory=$false)]
	[string]$server,
    [Parameter( Mandatory=$false)]
    [int]$hours
)

# Add default log time if not set
if (!($hours))
{
    $hours = 72
}

#Add Exchange 2010 snapin if not already loaded
if (!(Get-PSSnapin | where {$_.Name -eq "Microsoft.Exchange.Management.PowerShell.E2010"}))
{
	Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010 -ErrorAction SilentlyContinue
}

#...................................
# Script
#...................................


#Check if a single server was specified
if ($server)
{
	#Run for single specified server
	try
	{
		[array]$servers = @(Get-ExchangeServer $server -ErrorAction Stop)
	}
	catch
	{
		#Couldn't find Exchange server of that name
		Write-Warning $_.Exception.Message

		#Exit because single server was specified and couldn't be found in the organization
		EXIT
	}
}
else
{
	#Get list of Hub Transport servers in the organization
	[array]$servers = @(Get-ExchangeServer | Where-Object {$_.IsHubTransportServer})
}

#Check each server
foreach($server in $servers)
{
    # Calculate Date
    $Begin = (Get-Date).AddHours(-$hours)

	#$events = @(Invoke-Command –Computername $server –ScriptBlock { Get-EventLog -LogName Application | Where-Object {$_.Source -eq "MSExchangeTransport" -and $_.Category -eq "ResourceManager"} })
    # Add begin and end log search time
    #$events = @(Invoke-Command –Computername $server –ScriptBlock { param($Begin) Get-EventLog -After $Begin -Before (Get-Date) -LogName Application | Where-Object {$_.Source -eq "MSExchangeTransport" -and $_.Category -eq "ResourceManager"} } -ArgumentList $Begin)
	$events = @(Get-EventLog -After $Begin -Before (Get-Date) -LogName Application | Where-Object {$_.Source -eq "MSExchangeTransport" -and $_.Category -eq "ResourceManager"})
    $count = $events.count

	if ($count -lt 1)
	{
		$Output = "OK: $server has no back pressure events found."
        Write-Host $Output
        $State = "0"
	}
	else
	{
		$lastevent = $events | Select-Object -First 1

		$now = Get-Date
		$timewritten = $lastevent.TimeWritten
		$ago = "{0:N0}" -f ($now - $timewritten).TotalHours

		switch ($lastevent.EventID)
		{
			"15006"
            {
                $BPstate = "Critical (Diskspace)"
                $State = "1"
            }
			"15007"
            {
                $BPstate = "Critical (Memory)"
                $CState = "1"
            }
			default
            {
                $BPstate = $lastevent.ReplacementStrings[1]
                #Unknown status
                $State = "2"
            }
		}

		$Output = "$server is $BPstate as of $ago hours ago"
        Write-Host $Output
        Exit

	}
}