UserName:指定要检索的事件的用户名。 XPath:指定要使用的XPath查询。 Verbose:显示详细的命令执行信息。 Debug:显示调试信息。 ErrorAction:指定在发生错误时采取的操作。 WarningAction:指定在发生警告时采取的操作。 ErrorVariable:指定将错误信息保存到的变量。 WarningVariable:指定将警告信息保存到的变量。 OutVa...
它可以将事件转换为XML格式,以便进一步处理和分析。 要获取值,可以使用以下步骤: 打开Windows PowerShell控制台。 输入以下命令以获取事件并将其转换为XML格式: 代码语言:powershell 复制 $events = Get-WinEvent -LogName <日志名称> -MaxEvents <最大事件数> -FilterXPath <筛选条件> | Select-Object -...
Get-WinEvent-LogName Security-FilterXPath "*/System/EventID!=4624" 这条命令将从 Security 日志中获取除了事件 ID 为 4624 之外的所有事件。 获取除了 4624 和 4648 之外的所有事件: powershellCopy Code Get-WinEvent-LogName Security-FilterXPath "*/System[EventID!=4624 and EventID!=4648]" ...
Get-WinEvent [[-LogName] <String[]>] [-MaxEvents <Int64>] [-ComputerName <String>] [-Credential <PSCredential>] [-FilterXPath <String>] [-Force] [-Oldest] [<CommonParameters>]PowerShell 複製 Get-WinEvent [-ListLog] <String[]> [-ComputerName <String>] [-Credential <P...
Provides access to the FilterXPath parameter. C++ 複製 public: property System::Activities::InArgument<System::String ^> ^ FilterXPath { System::Activities::InArgument<System::String ^> ^ get(); void set(System::Activities::InArgument<System::String ^> ^ value); }; Property Value ...
FilterXPath parameter. C++ 複製 public: property System::String ^ FilterXPath { System::String ^ get(); void set(System::String ^ value); }; Property Value String Attributes ParameterAttribute ValidateNotNullAttribute Applies to 產品版本 PowerShell SDK 7.2.0, 7.3.0, 7.4.0 Windows...
Get-WinEvent [[-LogName] <String[]>] [-MaxEvents <Int64>] [-ComputerName <String>] [-Credential <PSCredential>] [-FilterXPath <String>] [-Force] [-Oldest] [<CommonParameters>]PowerShell 复制 Get-WinEvent [-ListLog] <String[]> [-ComputerName <String>] [-Credential <PSCredential>]...
Get-WinEvent [-LogName] <string[]> [-ComputerName <string>] [-Credential <PSCredential>] [-FilterXPath <string>] [-Force <switch>] [-MaxEvents <int64>] [-Oldest] [<CommonParameters>] Get-WinEvent [-Path] <string[]> [-ComputerName <string>] [-Credential <PSCredential>] [-FilterXPat...
Get-WinEvent [-LogName] <string[]> [-ComputerName <string>] [-Credential <PSCredential>] [-FilterXPath <string>] [-Force <switch>] [-MaxEvents <int64>] [-Oldest] [<CommonParameters>] Get-WinEvent [-Path] <string[]> [-ComputerName <string>] [-Credential <PSCredential>] [-FilterXPat...
Get-WinEvent [[-LogName] <String[]>] [-MaxEvents <Int64>] [-ComputerName <String>] [-Credential <PSCredential>] [-FilterXPath <String>] [-Force] [-Oldest] [<CommonParameters>]PowerShell 复制 Get-WinEvent [-ListLog] <String[]> [-ComputerName <String>] [-Credential <PSCredential>]...