{"id":1258,"date":"2014-06-03T11:59:00","date_gmt":"2014-06-03T11:59:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2014\/06\/03\/powertip-find-permissible-event-log-keywords-with-powershell\/"},"modified":"2014-06-03T11:59:00","modified_gmt":"2014-06-03T11:59:00","slug":"powertip-find-permissible-event-log-keywords-with-powershell","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/powertip-find-permissible-event-log-keywords-with-powershell\/","title":{"rendered":"PowerTip: Find Permissible Event Log Keywords with PowerShell"},"content":{"rendered":"<p><b>Summary<\/b>: Learn to find permissible event log keywords values with Windows PowerShell.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\" alt=\"Hey, Scripting Guy! Question\" \/>&nbsp;How can I use Windows PowerShell to find examples of keywords when I use a&nbsp;<b>FilterHashTable<\/b>&nbsp;value <br \/>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; with&nbsp;<b>Get-WinEvent<\/b>?<\/p>\n<p style=\"margin-left:30px\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\" alt=\"Hey, Scripting Guy! Answer\" \/>&nbsp;Create an instance of the&nbsp;<b>StandardEventKeywords<\/b>&nbsp;enumeration, and then look at the&nbsp;<b>Static<\/b>&nbsp;properties:<\/p>\n<p style=\"margin-left:90px\">[System.Diagnostics.Eventing.Reader.StandardEventKeywords] | gm -s -MemberType property<\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/7610.Dr.ScriptoForTips.jpg\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/7610.Dr.ScriptoForTips.jpg\" alt=\" \" border=\"0\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Summary: Learn to find permissible event log keywords values with Windows PowerShell. &nbsp;How can I use Windows PowerShell to find examples of keywords when I use a&nbsp;FilterHashTable&nbsp;value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; with&nbsp;Get-WinEvent? &nbsp;Create an instance of the&nbsp;StandardEventKeywords&nbsp;enumeration, and then look at the&nbsp;Static&nbsp;properties: [System.Diagnostics.Eventing.Reader.StandardEventKeywords] | gm -s -MemberType property<\/p>\n","protected":false},"author":596,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[356,3,45],"class_list":["post-1258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-powertip","tag-scripting-guy","tag-windows-powershell"],"acf":[],"blog_post_summary":"<p>Summary: Learn to find permissible event log keywords values with Windows PowerShell. &nbsp;How can I use Windows PowerShell to find examples of keywords when I use a&nbsp;FilterHashTable&nbsp;value &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; with&nbsp;Get-WinEvent? &nbsp;Create an instance of the&nbsp;StandardEventKeywords&nbsp;enumeration, and then look at the&nbsp;Static&nbsp;properties: [System.Diagnostics.Eventing.Reader.StandardEventKeywords] | gm -s -MemberType property<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/1258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/596"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=1258"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/1258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=1258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=1258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=1258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}