小编J. *_*Doe的帖子

嘿嘿,,

如何通过 Powershell 读取服务器上所有成功登录的列表？列表中应输出以下字段：TimeGenerator、UserName。我目前陷入以下脚本：我怀疑这是 Split 命令

Clear-Host
Get-EventLog -LogName Security | Where-Object {$_.EventID -eq 4624} | ForEach-Object {
    $message = $_.Message
    $userName = ($message -split "Kontoname: ")[1] -split "`r`n"[1]
    [PSCustomObject]@{
        TimeGenerated = $_.TimeGenerated
        UserName = $userName
    }
} | Format-Table TimeGenerated, UserName

我的错误在哪里，或者可能是我的 PowerShell 命令错误？

谁可以帮助我或者有一个脚本示例给我？

问候

Clear-Host
Get-EventLog -LogName Security | Where-Object {$_.EventID -eq 4624} | ForEach-Object {
    $message = $_.Message
    $userName = ($message -split "Kontoname: ")[1] -split "`r`n"[1]
    [PSCustomObject]@{
        TimeGenerated = $_.TimeGenerated
        UserName = $userName
    }
} | …