Event Logs and Running Containers
To connect to docker and launch a PS prompt inside the container
docker exec CONTAINERID
To fetch the newest 1000 events in the Application Event log (the format is needed to avoid truncation)
Get-EventLog Application –Newest 1000 | format-table -wrap
To search for specific terms in an event log
Get-WinEvent –listlog *mykeyword*
Leave a Reply