Get the Events from Specific Event ID to Specific Event ID (2 User Input : Event ID Upper Limit and Event ID Lower Limit)

Question

Get the Events from Specific Event ID to Specific Event ID (2 User Input : Event ID Upper Limit and Event ID Lower Limit)

Answer 1

Hi,

Please try this. Set $LogName to the name of the log you want to check.

$LowerLimit = Read-Host -Prompt "Lower Limit"  
$UpperLimit = Read-Host -Prompt "Upper Limit"  
$LogName = "Microsoft-Windows-PowerShell/Operational"  
Get-WinEvent -LogName $LogName | Where-Object { ($_.id -gt $LowerLimit) -and ($_.id -lt $UpperLimit)}  

Best Regards,
Ian Xue

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.