$Date = (Get-Date).AddDays(-2) Get-WinEvent Application | Where-Object {$_.TimeCreated -ge $Date} | Format-Table TimeCreated, LogName, Level, LevelDisplayName, Id, ProviderName, Message