We use PowerShell to parse your Server’s/computers event logs using the Get-EventLog cmdlet. There are several parameters available. Use the -Log switch followed by the name of the log file to view a specific log.
For example we can use the following command to view the Application log:
Get-EventLog -Log "Application"
Few options we have with Get-Eventlog options
Get-WinEvent with filter for event id
PowerShell’s Get-WinEvent cmdlet is a powerful method to filter Windows event and diagnostic logs. Performance improves when a Get-WinEvent is used with filters like =FilterHashtable with logname … Read the rest