プロセスダンプとログの収集方法

#Configurable Variables
$procDump = "C:\temp\procdump.exe"
$logFolder = "C:\temp\"

#Define Processes and Log Output Specifications
$processNames = "VeeamAgent", "Veeam.Backup.Manager"
$PSDefaultParameterValues['Out-File:Width'] = 2000
$bundleLogs = 0 #leave set to 0, the script will set it to 1 if it collects something that needs to be compressed.

#Create Log Write Function
function Write-HostWithLog {
    param(
        [Parameter(Mandatory = $true, Position = 0)]
        [string]$Message
    )
    $formattedMessage = $Message
    # Write to console
    Write-Host $formattedMessage
    # Write to log file
    $formattedMessage | Out-File -FilePath $logFile -Append
}

# Create Log Folder and Script Log File
$logPath = (Join-Path -Path $logFolder -ChildPath "KB1727_Logs_$(Get-Date -Format "yyMMddHHmmss")")
New-Item -ItemType Directory -Path $logPath -Force
$logFile = (Join-Path -Path $logPath -ChildPath "DumpLog.log")


#Get the processes that match the specified process names
$matchingProcesses = Get-Process | Where-Object { $processNames -contains $_.ProcessName }
#If no processes are found, skip process dumping
if ($matchingProcesses -eq $null) {
    Write-HostWithLog "Processes $processNames were not detected. No processes to dump."
    } else {
    $bundleLogs = 1
    #List Processes
    Write-HostWithLog "The following processes were found:"
    Write-HostWithLog (($matchingProcesses) | Out-String)
    # Create a process dump for each matching process
    foreach ($process in $matchingProcesses) {
        $dumpFilePath = Join-Path -Path $logPath -ChildPath "$($process.Name)_$($process.Id)_$(Get-Date -Format "yyyyMMdd_HHmmss").dmp"
        $commandLine = $(Get-CimInstance -ClassName Win32_Process -Filter "ProcessId = $($process.Id)").CommandLine
        Write-HostWithLog "Creating dump for process: [$($process.Name)] with PID [$($process.Id)]"
        Write-HostWithLog "Process Command Line: [$commandLine]"
        #Dump Process
        Start-Process -FilePath $procDump -ArgumentList "-accepteula -ma $($process.Id) $dumpFilePath" -NoNewWindow -Wait
        Write-HostWithLog "Dump Created: [$dumpFilePath]"
        Write-HostWithLog "------------------------------------------------"
    }
}
#Test if VBR cmdlets are available
if (Get-Command Get-VBRJob -errorAction SilentlyContinue) {
    #Dump job lists
    Write-HostWithLog "Backup Jobs"
    Write-HostWithLog ((get-VBRJob | ft Name, ID, SourceType, IsRunning) | Out-String)
    Write-HostWithLog "Computer Backup Jobs"
    Write-HostWithLog ((Get-VBRComputerBackupJob | ft Name, Id, Type, Mode) | Out-String)
    Write-HostWithLog "Unstructured Backup Jobs"
    Write-HostWithLog ((Get-VBRUnstructuredBackupJob | ft Name, Id) | Out-String)
    Write-HostWithLog "SureBackup Jobs"
    Write-HostWithLog ((Get-VBRSureBackupJob | ft Name,Id,VirtualLab,ApplicationGroup) | Out-String)
    Write-HostWithLog "Tape Jobs"
    Write-HostWithLog ((Get-VBRTapeJob | ft Name, Id) | Out-String)
    #Dump Logs
    Export-VBRLogs -Server $(Get-VBRServer) -FolderPath $logPath -LastDays 1 -Compress:$false
    $bundleLogs = 1
    } else {
        Write-HostWithLog "Veeam Backup & Replication cmdlets not detected, assuming this is not being run on the Veeam Backup Server. Skipping job listing."
    }

#Create Log Bundle
$zipFilePath = Join-Path -Path $logFolder -ChildPath ("KB1727_Logs_$($env:COMPUTERNAME)_$(Get-Date -Format 'yyyyMMdd_HHmmss').zip")
if ($bundleLogs -eq 1 ) {
    Compress-Archive -Path $logPath\* -DestinationPath $zipFilePath -Force
    #Open Explorer
    explorer $logFolder
    } else {
    Write-HostWithLog "Nothing collected. Exiting."
}