is there a way to use PowerShell to query a "saved" event log file?
-
Monday, January 28, 2013 8:21 PMThere are two event log commandlets, get-eventlog and get-winevent, but I don't see an option to specify a file for either of them, only a name of a registered event log on the system. Is there a way to query a saved event log, possibly one copied from a Windows Server 2003 machine?
All Replies
-
Monday, January 28, 2013 8:55 PM
Hello notRoman,
Get-WinEvent -Path <YourFile.evtx>.Resource: Hey, Scripting Guy! Blog - Use PowerShell to Parse Saved Event Logs for Errors
Bye,
LucaDisclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.
- Proposed As Answer by Luca Fabbri Wednesday, January 30, 2013 12:39 PM
- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Monday, February 04, 2013 8:46 AM
.png)
