PowerTip: Find All Events from All Logs Related to PowerShell

Doctor Scripto

Summary: Learn how to use the Get-WinEvent cmdlet to return all events from all logs related to Windows PowerShell.

 How can I easily find events from all the event logs—both standard and the ETW logs that are related to Windows PowerShell?

 Use the Get-WinEvent cmdlet and use a wild card pattern for the provider name, as shown here.

Get-WinEvent -ProviderName *powershell*

Note   You may want to run the command with Admin rights because some logs require Admin rights for access.

Doctor Scripto Scripter, PowerShell, vbScript, BAT, CMD

Follow