Get-WinEvent filterhashtable AND path?

This works Get-WinEvent -FilterHashtable @{logname=‘Application’} This doesn’t Get-WinEvent -path C:\somevent.evtx -FilterHashtable @{logname=‘Application’}. Does anyone know if you can specify a specific event log when filtering instead of the computers current one?

I have no clue how I missed this.
Get-winevent -FilterHashtable @{Path="C:\somevent.evtx; logname=‘Application’}
Anyways I simply needed to do the above to solve my issue.

You would just use -FilterHashtable and add a Path key to it:

Get-WinEvent -FilterHashtable @{ LogName = 'Application'; Path = 'C:\someevent.evtx' } has all the details. :slight_smile: