Using Get-EventLog in PowerShell how can I show only 10 characters in the message

Question

I currently have the code below:

Get-EventLog -LogName Application 
| Where-Object EventID -EQ 1033 
| Select-Object EventID, Message

So my question is how can I just show the first 10 characters of the Message?

score 2 · Accepted Answer · answered Apr 07 '14 at 18:42

2

Use the substring method on your message property.

Get-EventLog -LogName Application | Select-Object EventID, @{Label='Message';Expression={$_.Message.Substring(0,10)}}

answered Apr 07 '14 at 18:42

Taylor Gibb

score 2 · Answer 2 · edited Apr 07 '14 at 19:53

2

Just as a follow up:

Get-EventLog -LogName Application 
| Where-Object EventID -EQ 1033 
| Select-Object EventID, @{l="Message";e={$_.message.substring(0,10)}}

edited Apr 07 '14 at 19:53

answered Apr 07 '14 at 18:47

Jason Morgan

That would only get the first 9 characters :) the first parameter of substring is what index to start at, while the second is how many characters you want. – Taylor Gibb Apr 07 '14 at 18:53

2 Answers2