Hi,
I have been hacking on your code here
I would like to query and get only the stuff from the last hour. I can't seem to get the syntax right.
$oResult=readEvent(@computername,"","","root\cimv2","Select * from Win32_NTLogEvent Where Logfile = 'Application' and TimeWritten> '20180723' ")
seems to work OK.
The following, where I try to get stuff after 1pm doesn't work. I have tried various combinations without success.
$oResult=readEvent(@computername,"","","root\cimv2","Select * from Win32_NTLogEvent Where Logfile = 'Application' and TimeWritten> '201807231300' ")
Any pointers much appreciated!