$search = "127.0.0.1"
$Logfiles = Get-WinEvent -ListLog *
Foreach ($i in $Logfiles) {
Get-WinEvent -FilterHashtable @{logname=$i.LogName; StartTime=(Get-Date).AddDays(-7)} -ErrorAction SilentlyContinue | where-object { $_.Message -like "*$search*" } | Format-List | Out-File "SearchEvent-$search.txt" -Append
}
The above script will allow you to search all the events for information and output it too a file, this is handily while looking for information and your not sure which log its held in.
Just change the $search value to what your looking for
No comments:
Post a Comment