Help with a command

Question

I want to write a command that creates a table that lists, for each log entry in the Security log,
the log ID, and its retention period but have no idea where to start

Answer 1

Hello @RoRoCola

I can recommend the next 2 articles with different examples and ideas on how to create it and implement it, depending on your needs:

https://devblogs.microsoft.com/scripting/use-powershell-to-parse-saved-event-logs-for-errors/
https://devblogs.microsoft.com/scripting/use-powershell-to-perform-offline-analysis-of-security-logs/

Hope this helps with your query,

--
--If the reply is helpful, please Upvote and Accept as answer--