Search notes:

PowerShell cmdLet get-eventLog

get-eventLog system
get-eventLog application
get-eventLog security     # requires admin privileges

get-eventLog system      -entryType error
get-eventLog application -source    oracle.ora19

View classic event logs

The names of «classic events logs» can be viewed with -list:
PS: C:\> get-eventLog -list

  Max(K) Retain OverflowAction        Entries Log
  ------ ------ --------------        ------- ---
  20,480      0 OverwriteAsNeeded       5,565 Application
  20,480      0 OverwriteAsNeeded           0 HardwareEvents
     512      7 OverwriteOlder              0 Internet Explorer
  20,480      0 OverwriteAsNeeded           0 Key Management Service
  20,480      0 OverwriteAsNeeded      26,267 Security
  20,480      0 OverwriteAsNeeded      51,773 System
  15,360      0 OverwriteAsNeeded       6,702 Windows PowerShell

See also

This example demonstrates how get-eventLog is used to determine which application is preventing an USB drive from being ejected.
get-winEvent will eventually(?) replace get-eventLog.
Powershell command noun: eventLog

Index