How to query EventLog for specific dates?

Question

I am accessing an Event Log from a remote computer using method (e.g. EventLogQuery class) described in this question. And that works.

What I am trying to do is to change the query to only bring back Information level entries from the last 24 hours.

In the linked question, the query is *[System/Level=2]. How do I include the dates and level into the query.

You need to pull the substantive code examples into this question...but you know that. — rory.ap, Sep 20 '18 at 20:24
Refer: https://msdn.microsoft.com/en-us/library/bb399427(v=vs.90).aspx — adityap, Sep 20 '18 at 20:32

score 0 · Accepted Answer · answered Oct 02 '18 at 21:37

Answering my own question in case anyone ever needed this. There is a really easy way to generate the query that you want.

Now you have the query that you want.

1 Answers1