Windows 2012
1 Topic
parsing data from output
I have an script which pull the fallowing Windows log, "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational". from few servers. PS script: Get-WinEvent -ComputerName $s.Name -logname "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" -MaxEvents 300 | Where-Object {$_.ID -Like '21'}| Select -ExpandProperty Message I'm getting the following results: User: ANY\User1 Session ID: 6 Source Network Address: 192.168.1.1 Remote Desktop Services: Session logon succeeded: User: ANY\User2 Session ID: 7 Source Network Address: 192.168.1.2 Remote Desktop Services: Session logon succeeded: User: ANY\User3 Session ID: 8 Source Network Address: 192.168.1.3 Remote Desktop Services: Session logon succeeded: .... I would like to see how I can parse all the results in Columns: Users Session ID SourceNet RDS ANY\User1 6 192.168.1.1 Session logon succeeded ANY\User2 7 192.168.1.2 Session logon succeeded ANY\User3 8 192.168.1.3 Session logon succeeded Any help is appreciated. Thanks.Solved2.9KViews0likes3Comments