Map names for properties in Get-WinEvent

170 Views Asked by At

When I do this request

Get-WinEvent -FilterHashTable @{LogName='Microsoft-Windows-TerminalServices-Gateway/Operational'; Id=307,302,303; StartTime='01.11.2022 0:00:01'} | Select-Object TimeCreated, ID, Message, Properties | Format-Table -AutoSize | Export-Clixml xml.xml

I get response with non-named properties, such as

<Obj RefId="19">
                <TNRef RefId="2" />
                <ToString>System.Diagnostics.Eventing.Reader.EventProperty</ToString>
                <Props>
                  <S N="Value">6280</S>
                </Props>
              </Obj>

How can I name properties according to how they are called in System log? As in Example on image Image

0

There are 0 best solutions below