This cmdlet is only available on the Windows platform.
The Get-CimInstance cmdlet gets the CIM instances of a class from a CIM server. You can specify
either the class name or a query for this cmdlet. This cmdlet returns one or more CIM instance
objects representing a snapshot of the CIM instances present on the CIM server.
If the InputObject parameter is not specified, the cmdlet works in one of the following ways:
If neither the ComputerName parameter nor the CimSession parameter is specified, then this
cmdlet works on local Windows Management Instrumentation (WMI) using a Component Object Model
(COM) session.
If either the ComputerName parameter or the CimSession parameter is specified, then this
cmdlet works against the CIM server specified by either the ComputerName parameter or the
CimSession parameter.
If the InputObject parameter is specified, the cmdlet works in one of the following ways:
If neither the ComputerName parameter nor the CimSession parameter is specified, then this
cmdlet uses the CIM session or computer name from the input object.
If the either the ComputerName parameter or the CimSession parameter is specified, then
this cmdlet uses the either the CimSession parameter value or ComputerName parameter value.
Examples
Example 1: Get the CIM instances of a specified class
This example retrieves the CIM instances of a class named Win32_Process.
Get-CimInstance -ClassName Win32_Process
Example 2: Get a list of namespaces from a WMI server
This example retrieves a list of namespaces under the root namespace on a WMI server.
Example 3: Get instances of a class filtered by using a query
This example retrieves all the CIM instances that start with the letter P of a class named
Win32_Process using the query specified by a Query parameter.
Get-CimInstance -Query "SELECT * from Win32_Process WHERE name LIKE 'P%'"
Example 4: Get instances of a class filtered by using a class name and a filter expression
This example retrieves all the CIM instances that start with the letter P of a class named
Win32_Process using the Filter parameter.
Get-CimInstance -ClassName Win32_Process -Filter "Name like 'P%'"
Example 5: Get the CIM instances with only key properties filled in
This example creates a new CIM instance in memory for a class named Win32_Process with
the key property @{ "Handle"=0 } and stores it in a variable named $x. The variable is passed as
a CIM instance to the Get-CimInstance cmdlet to get a particular instance.
This example gets the CIM instances of a class named Win32_Process and stores them in
the variables $x and $y. The variable $x is then formatted in a table containing only the
Name and KernelModeTime properties, the table set to AutoSize.
The instance retrieved with the Property parameter can be used to perform other CIM operations,
for example Set-CimInstance or Invoke-CimMethod.
Example 10: Get the CIM instance using CIM session
This example creates a CIM session on the computers named Server01 and Server02 using the
New-CimSession cmdlet and stores the session information in a variable named $s. The contents of
the variable are then passed to Get-CimInstance by using the CimSession parameter, to get the
CIM instances of the class named Win32_ComputerSystem.
Specifies the CIM session to use for this cmdlet. Enter a variable that contains the CIM session or
a command that creates or gets the CIM session, such as the New-CimSession or Get-CimSession
cmdlets. For more information, see
about_CimSession.
Specifies the name of the CIM class for which to retrieve the CIM instances. You can use tab
completion to browse the list of classes, because PowerShell gets a list of classes from the local
WMI server to provide a list of class names.
Specifies computer on which you want to run the CIM operation. You can specify a fully qualified
___domain name (FQDN), a NetBIOS name, or an IP address. If you do not specify this parameter, the
cmdlet performs the operation on the local computer using Component Object Model (COM).
If you specify this parameter, the cmdlet creates a temporary session to the specified computer
using the WsMan protocol.
If multiple operations are being performed on the same computer, connect using a CIM session for
better performance.
Specifies a where clause to use as a filter. Specify the clause in either the WQL or the CQL
query language. Do not include the WHERE keyword in the value of the parameter.
If you are already working with a CIM instance object, you can use this parameter to pass the CIM
instance object in order to get the latest snapshot from the CIM server. When you pass a CIM
instance object as an input, Get-CimInstance returns the object from server using a get CIM
operation, instead of an enumerate or query operation. Using a get CIM operation is more efficient
than retrieving all instances and then filtering them.
The InputObject parameter doesn't enumerate over collections. If a collection is passed, an
error is thrown. When working with collections, pipe the input to enumerate the values.
If the CIM class does not implement the get operation, then specifying the InputObject parameter
returns an error.
Indicates that only objects with key properties populated are returned. Specifying the KeyOnly
parameter reduces the amount of data transferred over the network.
Use the KeyOnly parameter to return only a small portion of the object, which can be used for
other operations, such as the Set-CimInstance or Get-CimAssociatedInstance cmdlets.
The default namespace is root/CIMV2. You can use tab completion to browse the list of
namespaces, because PowerShell gets a list of namespaces from the local WMI server to provide the
list of namespaces.
Specifies the amount of time that the cmdlet waits for a response from the computer. By default, the
value of this parameter is 0, which means that the cmdlet uses the default timeout value for the
server.
If the OperationTimeoutSec parameter is set to a value less than the robust connection retry
timeout of 3 minutes, network failures that last more than the value of the OperationTimeoutSec
parameter are not recoverable, because the operation on the server times out before the client can
reconnect.
Specifies a set of instance properties to retrieve. Use this parameter when you need to reduce the
size of the object returned, either in memory or over the network. The object returned also contains
the key properties even if you have not listed them using the Property parameter. Other
properties of the class are present but they are not populated.
Specifies a query to run on the CIM server. If the value specified contains double quotes ",
single quotes ', or a backslash \, you must escape those characters by prefixing them with the
backslash character. If the value specified uses the WQL LIKE operator, then you must escape
the following characters by enclosing them in square brackets []: percent %, underscore _,
or opening square bracket [.
You cannot use a metadata query to retrieve a list of classes or an event query. To retrieve a list
of classes, use the Get-CimClass cmdlet. To retrieve an event query, use the
Register-CimIndicationEvent cmdlet.
You can specify the query dialect using the QueryDialect parameter.
Specifies the resource uniform resource identifier (URI) of the resource class or instance. The URI
is used to identify a specific type of resource, such as disks or processes, on a computer.
A URI consists of a prefix and a path to a resource. For example:
By default, if you do not specify this parameter, the DMTF standard resource URI
http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/ is used and the class name is appended to it.
ResourceUri can only be used with CIM sessions created using the WSMan protocol, or when
specifying the ComputerName parameter, which creates a CIM session using WSMan. If you specify
this parameter without specifying the ComputerName parameter, or if you specify a CIM session
created using DCOM protocol, you will get an error, because the DCOM protocol does not support the
ResourceUri parameter.
If both the ResourceUri parameter and the Filter parameter are specified, the Filter
parameter is ignored.
Indicates that the instances of a class are returned without including the instances of any child
classes. By default, the cmdlet returns the instances of a class and its child classes.
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable,
-InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable,
-ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see
about_CommonParameters.
The source for this content can be found on GitHub, where you can also create and review issues and pull requests. For more information, see our contributor guide.