Powershell Get-EventLog how to strip out Caller Computer Name into a variable

Question

I want to grab the value listed under "Caller Computer Name" and put it in a variable so that I can use it to get the IP address of the computer in another command.

This is the code I am using to pull the data:

$event= Get-EventLog -LogName Security -ComputerName $DC -InstanceId 4740 -Newest 1

score -1 · Accepted Answer · answered Mar 01 '17 at 15:21

-1

You can access the property MachineName directly like this:

$machine_name= (Get-EventLog -LogName Security -ComputerName $DC -InstanceId 4674 -Newest 1).MachineName

answered Mar 01 '17 at 15:21

Ranadip Dutta

8,857
3
29
45

Thanks that worked perfect after changing the InstanceId to 4740 – Todd Welch Mar 01 '17 at 16:49
@ToddWelch: Yes, some people can't accept the way an issue can be handled. They will spend hours and if they don't come up with something, then they will burst on down-voting proper ans. :P – Ranadip Dutta Mar 02 '17 at 02:05
1

well I can only imagine how much there life must suck to feel the need to do something like that. – Todd Welch Mar 02 '17 at 11:21
Thats the beauty of life @Todd . :) – Ranadip Dutta Mar 02 '17 at 11:28

Powershell Get-EventLog how to strip out Caller Computer Name into a variable

1 Answers1