Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

How to get IP address and IP port from EventViewer with command from command line?

Status
Not open for further replies.

grofaty

IS-IT--Management
Jan 16, 2003
370
0
0
SI
Hi,
using Windows 2008 R2 I would like to get info when and from which source IP has someone tried to unsuccessfully connect to my Windows server.

Sample output should be something like:
[tt]Time IP address
-------------- -------------
sep 2014 12:00 192.168.20.10
sep 2014 12:01 192.168.20.11[/tt]

I searched the web but can't get the info I need.

For example I tried PowerShell command:
[tt]Get-EventLog -LogName Security |Where { ("FailureAudit" -eq $_.EntryType) }[/tt]
but above command displays only events without detailed data of IP Address.

Thanks
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top