Event Log

This topic contains 3 replies, has 2 voices, and was last updated by Profile photo of Curtis Smith Curtis Smith 1 year, 4 months ago.

  • Author
    Posts
  • #29691
    Profile photo of Ernesto Lombardi
    Ernesto Lombardi
    Participant
    Get-EventLog -List | select -ExpandProperty Entries | select -ExcludeProperty Message
    

    Index Time EntryType Source InstanceID Message
    —– —- ——— —— ———- ——-
    14787 Sep 11 08:16 SuccessA... Microsoft-Windows... 1102 The audit log was cleared....

    How can i get rid of the Message contents to save in a csv file for later use?

  • #29693
    Profile photo of Curtis Smith
    Curtis Smith
    Participant
    Get-EventLog -List | select -ExpandProperty Entries | select * -ExcludeProperty Message
    
  • #29694
    Profile photo of Ernesto Lombardi
    Ernesto Lombardi
    Participant

    Took you almost 30 minutes to tell me to put a * ??
    what kinda response time is this?
    Seriously tho thank you

  • #29700
    Profile photo of Curtis Smith
    Curtis Smith
    Participant

    No worries. To be honest when I first read the question I didn't read it well and thought you just had a type-o trying to exclude the messages rather than expand them. Then after figuring out that I miss-read, I have to validate the * did what it needed. Basically you have to tell select what to include before you can exclude.

You must be logged in to reply to this topic.