Get-WinEvent - Powershell 4.0 CmdLet

ActiveXperts Network Monitor ships with integrated Powershell scripts to monitor complex network. The scripts run out of the box
Download the ActiveXperts Network Monitor FREE version now »

Get-WinEvent

Short description
Gets events from event logs and event tracing log files on local and remote computers.

Syntax


Description
The Get-WinEvent cmdlet gets events from event logs, including classic logs, such as the System and Application logs, 
and the event logs that are generated by the Windows Event Log technology introduced in Windows Vista. It also gets 
events in log files generated by Event Tracing for Windows (ETW).


Without parameters, a Get-WinEvent command gets all the events from all the event logs on the computer. To interrupt 
the command, press CTRL + C.


Get-WinEvent also lists event logs and event log providers. You can get events from selected logs or from logs 
generated by selected event providers. And, you can combine events from multiple sources in a single command. 
Get-WinEvent allows you to filter events by using XPath queries, structured XML queries, and simplified hash-table 
queries.