PowerTip: Find Permissible Event Log Keywords with PowerShell

Doctor Scripto

Dr Scripto

Summary: Learn to find permissible event log keywords values with Windows PowerShell.

Hey, Scripting Guy! Question  How can I use Windows PowerShell to find examples of keywords when I use a FilterHashTable value
          with Get-WinEvent?

Hey, Scripting Guy! Answer  Create an instance of the StandardEventKeywords enumeration, and then look at the Static properties:

[System.Diagnostics.Eventing.Reader.StandardEventKeywords] | gm -s -MemberType property


Leave a comment