How to View Multiple event ID’s with Powershell

1 answer

Staff July 18, 2016

Get-Eventlog is the powershell command to see eventlog Log Name is name of the log under windows events such as application, system security, here is the command to view multiple event ID’s.
Change event ID and Logname to what you are looking for.

Get-EventLog -logname security | Where-Object {($_.eventid -eq 4732) -or ($_.eventid -eq 4733 ) -or ($_.eventid -eq 4746)} | select Message,TimeGenerated,Timecreated


Please login or Register to Submit Answer