intermediateSystem Administrationeventlogerrorstroubleshootinglogs
get-event-log-errors.ps1
1param(2 [string]$LogName = "System",3 [int]$Hours = 24,4 [int]$MaxEvents = 505)67$startTime = (Get-Date).AddHours(-$Hours)89Get-WinEvent -FilterHashtable @{10 LogName = $LogName11 Level = 212 StartTime = $startTime13} -MaxEvents $MaxEvents -ErrorAction SilentlyContinue |14Select-Object TimeCreated, Id, ProviderName, Message |15Format-Table -WrapParameters
$LogName(string)Event log name
Default:
System$Hours(number)Hours to look back
Default:
24$MaxEvents(number)Maximum events to return
Default:
50
Use Cases
- •Review system errors from the past day to identify recurring issues.
Details
CategorySystem Administration
Complexityintermediate
Added3/13/2026