• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 979
  • Last Modified:

Get-WinEvent Search for specific text

i'm still very new to powershell but wanted to know if there is a why i can use the get-winevent cmdlet to search for a keyword or phrase within the event logs of a remotee 2003 / 2008 server?

For example seaerch all events on a remote server(s) that had the word "userabc" in the body of the event id..
1 Solution
get-eventlog -logname "Windows PowerShell" -message "*userabc*" -computername Server01, Server02
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now