PS: Querying Event Viewer made easy
List all error events since a specified date in the past: Set a variable to a date that you want to see all error events after that: PS C:> $today = get-date 2/15/11 PS C:> get-eventlog -logname application -Source "*error*" -after $today | ft -auto Index Time EntryType Source InstanceID Message —– —- ——— —— ———- ——- 9783 Mar 13 10:42 Information Windows Error Reporting 1001 Fault bucket , type 0… 9594 Mar 07 00:08 Information Windows Error Reporting 1001 Fault bucket , type 0… 9272 Mar 06 19:34 Information Windows Error Reporting 1001 Fault bucket , type 0… 9271 […]
Read more