Parsing Windows Eventlog Message

25 Views Asked by At

I need to extract the Message column's "Account For Which Logon Failed:" portion of the below code:

Get-WinEvent -FilterHashTable @{LogName="Security"; ID=4625} | Select-Object TimeCreated, Message | Format-Table -wrap

No luck so far, any help would be appreciated.

0

There are 0 best solutions below