$log = Get-Eventlog -LogName Security -before $endDate $4 = $log | Select-Object -first 1 $4 generates PS C:> $4 Index Time EntryType Source InstanceID Message 41419 Aug 12 19:34 SuccessA… Microsoft-Windows… 4672 Special privileges assigned to new logon… …

Hi Ernesto, Please see if below works for you. https://gist.github.com/Dan1el42/51f0f0fdeb3f40f33ef8394c47aea219 -Daniel

Yup that works. Thank you for the help!

Get first line of event message

daniel-krebs August 12, 2016, 10:11pm 2

Hi Ernesto,

Please see if below works for you.

-Daniel

Topic		Replies	Views
Parsing EventLog Message PowerShell Help	3	357	May 16, 2024
Get info from an eventlog Message ( general/details) pane PowerShell Help	6	357	May 16, 2024
Extracting a String using Regex PowerShell Help	7	304	May 16, 2024
String Manipulation question PowerShell Help	1	203	May 16, 2024
Set drive letter variable from a block of text PowerShell Help	6	168	May 16, 2024