#exchange checking a event id base on id# and past #hours

sffatcat · Posted on

Get-EventLog application -After(Get-Date).Addhours(-6) |Where-Object {$_.eventid -eq 9646} |format-list

-After(Get-Date).Addhours(-6) – past 6 hours

Managing event logs in PowerShell