Certificate Event in powershell

Question

I am trying to view the certificate install and delete in powershell but when I use powershell command Get-EventLog -LogName it wont provide me the option for Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational, where information is available.

Any guide?

Answer 1

@Rich Matheisen Thank you, but this is not helpful, I am not getting the details information which is under friendly view or xml view, because description only says please refer to details for more information.

Answer 2

If you're no familiar with using XPATH to query XML then you might want to try using the Get-WinEventData script: Get-WinEventData-Extract-344ad840

Answer 3

Thank you so much it really help, Also as per event it says check detail for more information "Please refer to the "Details" section for more information" how I can that information in Powershell? including same get-winevent

Answer 4

Hi,

Get-EventLog work only on Windows classic event logs such as Application, System, or Security. To get logs that use the Windows Event Log technology in Windows Vista and later Windows versions, use Get-WinEvent.

Get-WinEvent -ListLog Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational  

Best Regards,
Ian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 5

Use Get-WinEvent instead.