diff --git a/Get-EventData.ps1 b/Get-EventData.ps1 new file mode 100644 index 0000000..98098f1 --- /dev/null +++ b/Get-EventData.ps1 @@ -0,0 +1,20 @@ +Function Get-EventData { + params( + [string]$LogName, + [string]$ProviderName, + [datetime]$SearchFromTime + ) + + # Store search position of event logs in the Windows Registry + # This should eliminate the possibility of double-reporting the same event + $BaseKey = 'HKLM:\SOFTWARE\ATERA Networks\Get-EventData' + + $AllLogs = (Get-WinEvent -ListLog *) + $LogsWithEvents = ($AllLogs | Where-Object { $_.RecordCount -gt 0 }) + + ForEach ( $logWithEvents in $LogsWithEvents ) { + + } + + +} \ No newline at end of file