Buscar reinicio de la maquina
Filtrar por la columna Source: Kernel-Power Event-id 109
Get-EventLog (Microsoft.PowerShell.Management) – PowerShell | Microsoft Learn
Get events from an event log using a source and event ID
Get-EventLog -LogName Application -Source Outlook | Where-Object {$_.EventID -eq 63} | Select-Object -Property Source, EventID, InstanceId, Message
Get-WinEvent -FilterHasTable @{ Logname = 'system' ; Id = 109}
Export logs to a CSV file
Get-EventLog -LogName Application | Export-Csv -Path "ApplicationLog.csv" -NoTypeInformation # Export logs to an XML file (using Get-WinEvent) Get-WinEvent -LogName System | Export-Clixml -Path "SystemLog.xml"