PowerTip: Find Permissible Event Log Keywords with PowerShell

Doctor Scripto

Dr Scripto

Summary: Learn to find permissible event log keywords values with Windows PowerShell.

Hey, Scripting Guy! Question How can I use Windows PowerShell to find examples of keywords when I use a FilterHashTable value
          with Get-WinEvent?

Hey, Scripting Guy! Answer Create an instance of the StandardEventKeywords enumeration, and then look at the Static properties:

[System.Diagnostics.Eventing.Reader.StandardEventKeywords] | gm -s -MemberType property

Doctor Scripto
Dr Scripto

Scripter, PowerShell, vbScript, BAT, CMD

Follow Dr Scripto   


    Leave a comment