Author Posts

September 11, 2015 at 7:52 am

Get-EventLog -List | select -ExpandProperty Entries | select -ExcludeProperty Message

Index Time EntryType Source InstanceID Message
—– —- ——— —— ———- ——-
14787 Sep 11 08:16 SuccessA... Microsoft-Windows... 1102 The audit log was cleared....

How can i get rid of the Message contents to save in a csv file for later use?

September 11, 2015 at 8:27 am

Get-EventLog -List | select -ExpandProperty Entries | select * -ExcludeProperty Message

September 11, 2015 at 9:00 am

Took you almost 30 minutes to tell me to put a * ??
what kinda response time is this?
Seriously tho thank you

September 11, 2015 at 10:19 am

No worries. To be honest when I first read the question I didn't read it well and thought you just had a type-o trying to exclude the messages rather than expand them. Then after figuring out that I miss-read, I have to validate the * did what it needed. Basically you have to tell select what to include before you can exclude.