-
Notifications
You must be signed in to change notification settings - Fork 14
Description
I ran the script after settting up a corresponding logstash filter and ended up getting nothing but red error output
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
Get-WinEvent : The data is invalid
At C:\Temp\evt2ls.ps1:53 char:9
- $data = Get-WinEvent -FilterHashtable @{logname="*"; starttime=$starttime} |
Con ... -
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali
dDataException - FullyQualifiedErrorId : The data is invalid,Microsoft.PowerShell.Command
s.GetWinEventCommand
- CategoryInfo : NotSpecified: (:) [Get-WinEvent], EventLogInvali