按月将Windows日志导出至CSV文件

            <span>#</span>
            <span> 这个月的第一天</span>
            <span>
#</span>
            <span>..........................................到这里之前是取当年第一天</span>
            <span>
#</span>
            <span>(Get-Date 0).AddYears((Get-Date).Year - 1).AddMonths((Get-Date).Month - 2)</span>
            <span>
#</span>
            <span> 这个月的最后一天</span>
            <span>
#</span>
            <span>......................................................................到这里之前是次年第一天</span>
            <span>
#</span>
            <span>(Get-Date 0).AddYears((Get-Date).Year - 1).AddMonths((Get-Date).Month - 1).AddDays(-1)</span>
            <span>$lognames</span> = <span>"</span><span>Application</span><span>"</span>,<span>"</span><span>Security</span><span>"</span>,<span>"</span><span>System</span><span>"</span><span>$lastmonthfirstday</span> = (Get-Date 0).AddYears((Get-Date).Year - 1).AddMonths((Get-Date).Month - 2<span>)
</span><span>$lastmonthlastday</span> = (Get-Date 0).AddYears((Get-Date).Year - 1).AddMonths((Get-Date).Month - 1).AddDays(-1<span>)
</span><span>foreach</span>(<span>$logname</span><span>in</span><span>$lognames</span><span>) {
    Get</span>-EventLog -ComputerName <span>$env:COMPUTERNAME</span> -LogName <span>$logname</span> -After <span>$lastmonthfirstday</span> -Before <span>$lastmonthlastday</span> | Export-Csv -Path (<span>"</span><span>C:EventLog</span><span>"</span> + <span>$lastmonthfirstday</span>.Year + <span>"</span><span>_</span><span>"</span> + <span>$lastmonthfirstday</span>.Month + <span>"</span><span>_</span><span>"</span> + <span>$env:COMPUTERNAME</span> + <span>"</span><span>_</span><span>"</span> + <span>$logname</span> + <span>"</span><span>.CSV</span><span>"</span><span>)
}</span>