Posted On September 21, 2022

PowerShell: Search Windows Event Logs

kimconnect 0 comments
blog.KimConnect.com >> Codes , Windows >> PowerShell: Search Windows Event Logs
# searchWindowsEventsLog.ps1

$computername=$env:computername
$logType='Security'
$eventId=4732
$daysBack=365
$limit=9999
$messageLike="*Remote Desktop Users*"

function searchWindowsEvents{
    param(
        $computername=$env:computername
        $logType='Security'
        $eventId=4732
        $daysBack=365
        $limit=9999
        $messageLike="*Remote Desktop Users*"    
    )    

    $filter=@{
        LogName=$logType
        ID=$eventId
        StartTime=[datetime]::Now.AddDays(-$daysBack)
    }
    
    $events=Get-WinEvent -FilterHashTable $filter -ComputerName $computername -EA Ignore|select -first $limit
    $events|?{$_.Message -like $messageLike}
}

searchWindowsEvents $computername $logType $eventId $daysBack $limit $messageLike

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

How to Install RSA Radius Server

Configure firewall to NAT these ports for RSA:22 TCP49 TCP80 TCP161 UDP443 TCP1645 UDP1646 UDP1812…

Basic CSS: Add a Negative Margin to an Element

<style>.injected-text {margin-bottom: -25px;text-align: center;}.box {border-style: solid;border-color: black;border-width: 5px;text-align: center;}.yellow-box {background-color: yellow;padding: 10px;}.red-box {background-color: crimson;color: #fff;padding:…

JavaScript: Random Quote Generator

Demo Link: https://blog.kimconnect.com/wp-content/projects/randomQuoteGenerator.html HTML code: <body> <div class="container fluid"> <div> <div class="text-center"> <h1> Random Quote…
Other project: DragonCoin.com