22.3. Summary

The get-eventlog cmdlet allows you to list the event logs available on the local machine and to inspect the content of a local event log of interest.

Using the where-object, sort-object, group-object and other cmdlets together with the properties of the EventLogEntry object you can filter events to focus on events of particular interest to you.

Get Professional Windows® PowerShell now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.