Logging

View logs

• Open Event Log app

Log failed login attempts

• Open local security policy app -> local policies -> audit

Using Powershell

• Show last 100 system logs

Get-EventLog -LogName System -Newest 100

• Show logs from an application

Get-EventLog -LogName Application -Source Outlook

• Show complete message of one log entry (e.g. with index 123)

Get-EventLog -LogName System -Index 123 | Format-Table -Wrap

• Show summary of event logs

Get-EventLog -List

Useful LogNames

• Applicaten

• System

• HardwareEvents