New-EAIEvent
Syntax
Section titled “Syntax”__AllParameterSets
Section titled “__AllParameterSets”New-EAIEvent [-EventCi] <string> [-EventObject] <string> [-EventSource] <string> [-EventName] <string> [-EventDescription] <string> [[-Severity] <string>] [[-EventTime] <datetime>] [[-EventId] <string>] [[-EventDomain] <string>] [[-EventDetails] <string>] [[-EventCiLink] <string>] [[-EventNameLink] <string>] [[-EventSourceId] <string>] [[-EventSourceIdLink] <string>] [-SourceRecord] <Object> [[-Enrichments] <hashtable>] [<CommonParameters>]Description
Section titled “Description”New-EAIEvent builds a valid Edwin CEF payload from named parameters. Use this cmdlet to shape third-party data before sending with Send-EAIEvents.
Examples
Section titled “Examples”EXAMPLE 1
Section titled “EXAMPLE 1”New-EAIEvent -EventCi "server01" -EventObject "disk" -EventSource "VendorX" -EventName "Disk full" -EventDescription "Disk usage exceeded 90%" -Severity Major -SourceRecord @{ host = "server01" }Parameters
Section titled “Parameters”-Enrichments
Section titled “-Enrichments”Optional enrichment key/value pairs.
Type: System.Collections.HashtableDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 15 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventCi
Section titled “-EventCi”The configuration item associated with the event.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 0 IsRequired: true ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventCiLink
Section titled “-EventCiLink”Optional URL link for the configuration item.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 10 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventDescription
Section titled “-EventDescription”The event description.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 4 IsRequired: true ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventDetails
Section titled “-EventDetails”Optional additional event details.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 9 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventDomain
Section titled “-EventDomain”The event domain for tenant-federated environments. Defaults to an empty string.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 8 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventId
Section titled “-EventId”The unique event identifier. Defaults to a new GUID.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 7 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventName
Section titled “-EventName”The event name.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 3 IsRequired: true ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventNameLink
Section titled “-EventNameLink”Optional URL link for the event name.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 11 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventObject
Section titled “-EventObject”The object affected by the event.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 1 IsRequired: true ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventSource
Section titled “-EventSource”The source system that generated the event.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 2 IsRequired: true ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventSourceId
Section titled “-EventSourceId”Optional source system event identifier.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 12 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventSourceIdLink
Section titled “-EventSourceIdLink”Optional URL link for the source event identifier.
Type: System.StringDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 13 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-EventTime
Section titled “-EventTime”The event timestamp. Defaults to current UTC time.
Type: System.DateTimeDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 6 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-Severity
Section titled “-Severity”The event severity. Accepts enum names (Critical, Major, Minor, Warning, Indeterminate, Clear) or integer values 0-5.
Type: System.StringDefaultValue: IndeterminateSupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 5 IsRequired: false ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''-SourceRecord
Section titled “-SourceRecord”The original source payload to embed in source_record.
Type: System.ObjectDefaultValue: ''SupportsWildcards: falseAliases: []ParameterSets:- Name: (All) Position: 14 IsRequired: true ValueFromPipeline: false ValueFromPipelineByPropertyName: false ValueFromRemainingArguments: falseDontShow: falseAcceptedValues: []HelpMessage: ''CommonParameters
Section titled “CommonParameters”This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.