PowerShell Core for Linux Administrators Cookbook

How to do it...

This is, in fact, very simple. Here is the high-level flow of what we want to do:

1. Loop through each line of the log. We will use Get-Content and the foreach loop construct for this.
2. Perform a simple string manipulation to get the timestamp.
3. Parse the JSON to get the username as well as the email address.

Here is the script that will perform this operation.

$AllLogLines = Get-Content ./ch10/08-mdm-reinstall-log.log
$UserTable = @()

foreach ($Line in $AllLogLines) {
    $Timestamp = ($Line.Split(' '))[0]

    $Line = $Line -replace ".+(DeviceActionEvent)\ \{", '{'
    $Line = $Line -replace '\]$' # Alternatively: $Line = $Line | Select-String -Pattern '(\{.*})' | ForEach-Object { $PSItem.Matches | ForEach-Object { $PSItem.Value } } $JsonData ...