Event Log

This topic contains 3 replies, has 2 voices, and was last updated by  Curtis Smith 2 years, 6 months ago.

  • Author
  • #29691

    Ernesto Lombardi
    Get-EventLog -List | select -ExpandProperty Entries | select -ExcludeProperty Message

    Index Time EntryType Source InstanceID Message
    —– —- ——— —— ———- ——-
    14787 Sep 11 08:16 SuccessA... Microsoft-Windows... 1102 The audit log was cleared....

    How can i get rid of the Message contents to save in a csv file for later use?

  • #29693

    Curtis Smith
    Get-EventLog -List | select -ExpandProperty Entries | select * -ExcludeProperty Message
  • #29694

    Ernesto Lombardi

    Took you almost 30 minutes to tell me to put a * ??
    what kinda response time is this?
    Seriously tho thank you

  • #29700

    Curtis Smith

    No worries. To be honest when I first read the question I didn't read it well and thought you just had a type-o trying to exclude the messages rather than expand them. Then after figuring out that I miss-read, I have to validate the * did what it needed. Basically you have to tell select what to include before you can exclude.

You must be logged in to reply to this topic.