About hammerthework

hammerthework · ‎10-14-2010

No there is no pattern to the names/containers. They are based on the names of the application. Regarding wildcarding or regex, we would need the ability to specifically exclude one or more logs but include the rest. Something like $eventLogList = AllEventLogs | where EventLog <> ("Security" OR "Sytem") as an example.

hammerthework · ‎10-05-2010

Problem: a hundred servers with the basic event logs (system, application, security) plus various other custom log containers. I want to get all the log containers but not the security log. All the servers don't have the same set of custom log containers so one conf file defining all the logs specifically isn't easy. Also, custom event logs get added regularly so the conf file will not be static. Is there a way to create a conf file that will use a wildcard for the event logs and also not a specifc one that i won't have to change often? thanks

Posts	2
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎10-05-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

All Windows Event Logs but not others?

Re: All Windows Event Logs but not others?

All Windows Event Logs but not others?