0
responses

Hi all,

I would like to set the actual IP address of a computer when an event is raised and add the result in a new field.
Is it possible to set a new field with powershell ?

<Exec>
if ($EventID == 11001) \
{\
exec_async("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", "-ExecutionPolicy", "ByPass", "-NonInteractive", "-Command", "(gwmi Win32_NetworkAdapterConfiguration | where {$_.IPEnabled}).IPAddress");\
}
</Exec>

AskedDecember 7, 2021 - 10:51am

Answers (0)