How to get just part of an event description using get-eventlog powershell command

i need export event ids 3263, want export part of description ... being cn of user in event?

any appreciated!!

scott hastings

scott d hastings, sr.

you'll need parse out of message text, regular expression.

without knowing message text format is, or event source , log name event id for, that's best can do.

[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

Windows Server > Windows PowerShell

Como