Trying to figure out how to pull detailed information from the eventlog using powershell.
I have been able to get a listing of specific events with the following line of code:
get-winevent -FilterHashTable @{logname = "Microsoft-Windows-Diagnostics-Performance/Operational"; ID = 100} | Format-List
Is there any way to obtain the information contained in the "EventData" section of the event such as the BootStartTime, MainPathBootTime, etc.
Note: I am currently trying to do it in Powershell, but if it can be done easier in another scripting format (vbscript/etc). That can work also.
The environment is Windows 7.
Thank you in advance.
I have been able to get a listing of specific events with the following line of code:
get-winevent -FilterHashTable @{logname = "Microsoft-Windows-Diagnostics-Performance/Operational"; ID = 100} | Format-List
Is there any way to obtain the information contained in the "EventData" section of the event such as the BootStartTime, MainPathBootTime, etc.
Note: I am currently trying to do it in Powershell, but if it can be done easier in another scripting format (vbscript/etc). That can work also.
The environment is Windows 7.
Thank you in advance.