所以我得到了这个代码:
$events = Get-WinEvent -FilterHashtable @{logname='application'} |
Select Id,ProviderName,Message,TimeCreated
它给了我以下输出:
Id ProviderName Message TimeCreated
-- ------------ ------- -----------
327 ESENT svchost (664) The database engi... 28.07.2014 14:46:24
326 ESENT svchost (664) The database engi... 28.07.2014 14:46:24
8224 VSS The VSS service is shutting dow... 28.07.2014 14:40:23
903 Microsoft-Windows-Security-SPP The Software Protection service... 28.07.2014 14:39:40
16384 Microsoft-Windows-Security-SPP Successfully scheduled Software... 28.07.2014 14:39:40
...
如何将日期格式更改为“Full date and time (long date and long time) using universal time ”,例如 2007 年 8 月 30 日星期四下午 6:21:52?
最佳答案
这是另一种方法:
$events = Get-WinEvent -FilterHashtable @{logname='application'} |
Select Id,ProviderName,Message,@{Label = "TimeCreated"; Expression = {Get-Date $_.TimeCreated -Format U}}
关于date - 更改列表中的日期格式,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/24996662/