Skip to content

Instantly share code, notes, and snippets.

@secabstraction

secabstraction/ExportElastic.ps1

Created February 16, 2016 18:54
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save secabstraction/561d8f2ca9f9cdefc20c to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save secabstraction/561d8f2ca9f9cdefc20c to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. secabstraction created this gist Feb 16, 2016.
    5 changes: 5 additions & 0 deletions ExportElastic.ps1
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,5 @@
    # First lets collect some objects
    $Logons = Get-CimInstance -ClassName Win32_NtLogEvent -Filter "LogFile='Security' AND EventCode='4624'"

    # Now for the export
    $Logons | Export-Elastic -Node http://myelastic:9200