Hello!
My script is supposed to count the number of times different users succeeds and fails to login. The last part of the script should calculate how many % login fails each user have. Is there a good way to extract the values from each table? So it takes both values from each user and makes a "fails / success" calculation? Ive tried various Foreach loops but I never seem to get it right. Thanks in advance!
$eventLog1 = Get-WinEvent -FilterHashTable @{logname="security";id=4768}
$eventLog2 = Get-WinEvent -FilterHashTable @{logname="security";id=4771}
$successLogins = @{}
Foreach($event in $eventLog1)
{
$message = $event.Message
$user = $message.Split()[17]
if($user -match '\$$'){continue}
$successLogins[$user] += 1
}
Write-Host "---Successfull logins---" -Fo Green
$successLogins
$failedLogins = @{}
Foreach($event in $eventLog2)
{
$message = $event.Message
$user = $message.Split()[19]
if($user -match '\$$'){continue}
$failedLogins[$user] += 1
}
Write-Host " " -Fo Red
Write-Host "---Failed logins---" -Fo Red
$failedLogins
Write-Host " " -Fo Yellow
Write-Host "---Failed logins %---" -Fo Yellow
Thanks in advance!