How to Fetch Event Log of Your Computer using PowerShell

The "Get-EventLog" command is a built-in cmdlet in Windows PowerShell that retrieves events and event logs from the local computer or a remote computer.

The syntax of the "Get-EventLog" command is: Get-EventLog [-LogName] <string> [-After <datetime>] [-Before <datetime>] [-InstanceId <int[]>] [-EntryType {Error | Information | FailureAudit | SuccessAudit | Warning}] [-Source <string[]>] [-Message <string>] [-Newest <int>] [-ComputerName <string[]>] [<CommonParameters>]

Where:

• -LogName specifies the name of the event log to retrieve events from (e.g. "Application", "System", "Security", etc.).
• -After and -Before specify the range of dates to retrieve events for.
• -InstanceId specifies the event ID(s) to retrieve.
• -EntryType specifies the type of event to retrieve (e.g. Error, Information, Warning, etc.).
•  -Source specifies the event source(s) to retrieve.
• -Message specifies the message text to search for.
• -Newest specifies the number of most recent events to retrieve.
• -ComputerName specifies the name of the remote computer to retrieve events from.

For example, to retrieve the 50 most recent events from the "Application" event log, you would enter: Get-EventLog -LogName Application -Newest 50

To retrieve all events from the "System" event log that occurred between January 1, 2022 and February 28, 2022, you would enter: Get-EventLog -LogName System -After "01/01/2022" -Before "02/28/2022"

The "Get-EventLog" command can be useful for troubleshooting and analyzing system and application issues on Windows computers. "Get-EventLog" command has been superseded by the "Get-WinEvent" command in PowerShell version 2.0 and later. The "Get-WinEvent" command provides additional functionality and performance improvements over the "Get-EventLog" command.