How to filter Object that that contains only KB number in Event Viewer/Setup

[mrdon03 Participant Topics: 11 Replies: 11 Points: 130Rank: Participant]

Hi
I want to extract out only KB number that is stored in Event Viewer/Setup.
Below code is my start. Thank you

Get-WinEvent -FilterHashtable @{logname='Setup'} |
Select-Object MachineName, RecordID, TimeCreated, ID, LevelDisplayName, Message |
Where-Object { $_.Message -like "*KB*" } | Format-Table -AutoSize

[Matt Bloomfield Participant Topics: 4 Replies: 422 Points: 734Rank: Major Contributor]

Are you saying you just want a list of the KB numbers that appear in the Message field?

 

PowerShell

(Get-WinEvent -LogName Setup | Select-Object -ExpandProperty Message | Select-String -Pattern 'KB\d+').Matches.Value | Get-Unique

1	(Get-WinEvent -LogName Setup | Select-Object -ExpandProperty Message | Select-String -Pattern 'KB\d+').Matches.Value | Get-Unique

[Author]

Posts