$Date = (Get-Date).AddHours(-1) $objEvents = Get-WinEvent Security | Where-Object {$_.TimeCreated -ge $Date -and $_.id -eq 4740} | Select-Object -first 5 | Format-Table TimeCreated, LogName, Level, Id, ProviderName, Message if ($objEvents -ne $null){ add-content $MonFichier "Erreur détectée" foreach ($OneVent in $objEvents){ $OneVent #write-host $OneVent.LogName } }