Powershell script to filter events using an Xpath query
I have recently spent some time working with Xpath queries as part of Event Log filtering in Windows Server 2008. It’s a great feature, but one limitation I found was that it doesn’t appear possible to use the starts-with() function when querying Event Logs with either the UI or Wevtutil.exe. Here’s an example. Let’s say… Read More »