Get-Eventlog - PowerShell 1.0
Microsoft Windows PowerShell is a command-line shell and scripting tool based on the Microsoft .NET Framework. It is designed for system administrators, engineers and developers to control and automate the administration of Windows and applications.
More than hundred command-line tools (so called "cmdlets") can be used to perform system administration tasks and Windows Management Instrumentation (WMI). These cmdlets are easy to use, with standard naming conventions and common parameters, and standard tools for piping, sorting, filtering, and formatting data and objects.
Get-Eventlog
Description
Back up your Hyper-V VMs Easy & Fast. 100% built for Hyper-V. Free for 2 VMs, forever.
Usage
Options
-logName string
Name of the log file from which to get log events.
-list
Return a list of the log files available.
-asString
Send the output as a string, instead of object(s).
-newest
Gets the newest 'n' event log entries, where
'n' represents a numerical value for the newest
entries in the eventlog.
CommonParameters:
-Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutVariable.
Example(s)
Display the 50 most recent entries in the Application event log:
PS C:\>get-eventlog -newest 50 -logname application
Get the 100 recent entries from the System event log and store in $MyEvents.
Then pipeline the results to group-object to group them by event id.
PS C:\>$MyEvents = get-eventlog -logname system -newest 100
$events | group-object eventid
Write a new message to the Application eventlog:
PS C:\>$log = Get-EventLog -List | Where-Object { $_.Log -eq "Application" }
PS C:\>$log.Source = "Test"
PS C:\>$log.WriteEntry("Test message")
PS C:\>Get-EventLog Application -Newest 1 | Select Message