Showing LogName in table when querying multiple logs with PowerShell get-eventlog

1
votes

I'm new to PowerShell and I am trying to get recent events for a group of logs (right now application and system for testing purposes).
What's missing is a column in the final output showing the log the event came from.
I tried piping the output before the format-table to get member to see if there was a property that contained the logname and there doesn't seem to be one.
Is there a workaround to get this?

What I have right now is:

"application", "system" | foreach { Get-EventLog -LogName $_ -Newest 10 } | sort time -Descending | ft timegenerated, LogName, source, message -wrap -AutoSize

This is what I want, but the LogName column is blank because there's no such property.

1
powershell

1 Answers

1
votes

Someone may be able to clean this up a little, but you could try this:

"application", "system" | foreach { $events = Get-EventLog -LogName $_ -Newest 10; $events | Add-Member -MemberType NoteProperty -Name LogName -Value (Get-Culture).TextInfo.ToTitleCase($_); $events } | sort timegenerated -Descending | ft timegenerated, LogName, source, message -wrap -AutoSize

I fixed the sort command(typo) and format the logname as proper(uppercase first letter) to clean it up.