event
-
이벤트 뷰어 25카테고리 없음 2019. 3. 19. 16:16
특정 이벤트 뷰어를 보고 싶다.Get-WinEvent -FilterHashtable @{Logname='Microsoft-Windows-TerminalServices-LocalSessionManager/Operational'; id=25} -MaxEvents 1| Format-List -Property * Get-EventLog -LogName Security -Newest 1 -InstanceId 4625 | Select MachineName,Message,TimeWritten,TimeGenerated | Format-List *