This post originally appeared on [Wayback/Archive] PowerShell Get-WinEvent XML Madness: Getting details from event logs – GoateePFE – Archived, but due to link rot got lost including the images. I restored this post from the Wayback Machine archived version including the comments so the content gets re-indexed in search engines as this was one of the few posts detailing how to filter and extract XML from Windows Event logs using PowerShell.
I needed this content for a future blog post that is going to appear in a day or so: Some links on getting the most recent defragmentation time of a Windows volume
Queries:





