PowerShell 7.3 - Difficulty Filtering Out Specific Event Logs by ID While Using Get-WinEvent
I'm trying to retrieve specific event logs from Windows Event Viewer using PowerShell 7.3, but I seem to be having issues filtering the logs by Event ID. I want to extract logs related to a specific application crash which has an Event ID of 1000, but when I execute my command, it returns all entries instead of just the ones I need. Here's the command I’ve been using: ```powershell Get-WinEvent -LogName Application | Where-Object { $_.Id -eq 1000 } ``` Unfortunately, this returns a massive amount of logs, not just those with ID 1000. I’ve tried using the `-FilterHashtable` parameter for better performance: ```powershell Get-WinEvent -LogName Application -FilterHashtable @{Id=1000} ``` But I still get the same results. I've also checked the permissions to ensure that the script can access the event logs, and I've run PowerShell as an administrator. I've confirmed that there are entries with Event ID 1000 by inspecting the Event Viewer manually, so I'm puzzled as to why the filtering isn't working as expected. Is there a specific way to filter logs when using `Get-WinEvent` that I might be missing? Any insights on how to correctly retrieve just the entries I'm looking for would be greatly appreciated.