Summary: Learn how to use the Get-WinEvent cmdlet to return all events from all logs related to Windows PowerShell.
How can I easily find events from all the event logs—both standard and the ETW logs that are related to Windows PowerShell?
Use the Get-WinEvent cmdlet and use a wild card pattern for the provider name, as shown here.
Get-WinEvent -ProviderName *powershell*
Note You may want to run the command with Admin rights because some logs require Admin rights for access.
