Forum Discussion
Powershell Events IDs
Is there a way to query all or most of the powershell and powershell operational event ids?
hi! Jimcesseg thanks for your answer! This command only shows the event ids of the logs that the PC has recorded. I want to know all the event ids that exist for powershell and powershell-operational regardless of whether or not they were found on my pc
As far as I'm aware, this isn't possible as there's no interface for pulling all event definitions out from a provider.
Additionally, not all providers work from a predefined list of events. I've seen many that purely function as loggers of results for which the numeric event ids are useless.
The only thing you can do is see if Microsoft has documented a list of events, but I have never seen a way to pull such metadata programmatically.
Cheers,
Lain