Windows Server® 2012 Unleashed

Gathering Event Log Information

In PowerShell, the Get-EventLog cmdlet can be used to gather information from a Windows event log and list the event logs that are present on a system. To gather event log information, the name of the event log must be specified, as shown in the following example:

PS C:\> get-eventlog -logname applicationIndex Time          Type Source                EventID Message----- ----          ---- ------                ------- ------- 1778 Oct 05 19:44  Info MSExchangeFBPublish      8280 When initializing ses... 1777 Oct 05 19:38  Info MSExchangeIS             9826 Starting from 10/5/20... 1776 Oct 05 19:38  Info MSExchange ADAccess      2080 Process MSEXCHANGEADT... 1775 Oct 05 19:16  Info MSExchange ADAccess      2080 ...