MoonPoint Support Weblog

PowerShell Command to List the Event Logs on a Remote computer

If you want to see what event logs are available on a remote system, you can use the PowerShell command

get-eventlog -List -ComputerName
system_name

where system_name is the name of the remote computer.

PS C:\WINDOWS\system32> Get-EventLog -List -ComputerName Saturn

  Max(K) Retain OverflowAction        Entries Log
  ------ ------ --------------        ------- ---
     512      7 OverwriteOlder            117 Active Directory Web Services
  20,480      0 OverwriteAsNeeded      27,672 Application
  15,168      0 OverwriteAsNeeded       3,563 DFS Replication
     512      0 OverwriteAsNeeded       2,298 Directory Service
  16,384      0 OverwriteAsNeeded          61 DNS Server
  20,480      0 OverwriteAsNeeded           0 HardwareEvents
     512      7 OverwriteOlder              0 Internet Explorer
  20,480      0 OverwriteAsNeeded           0 Key Management Service
     128      0 OverwriteAsNeeded         103 OAlerts
  16,384      0 OverwriteAsNeeded           0 ODiag
  16,384      0 OverwriteAsNeeded           0 OSession
   5,056      7 OverwriteOlder              0 PRTG Network Monitor
 131,072      0 OverwriteAsNeeded     219,040 Security
  20,480      0 OverwriteAsNeeded      64,223 System
  15,360      0 OverwriteAsNeeded      18,604 Windows PowerShell


PS C:\WINDOWS\system32>

[/os/windows/PowerShell] permanent link

Wed, Jan 27, 2016 11:33 pm