Powershell set new field
Tags:
powershell exec_async
#1
cmiscloni
Hi all,
I would like to set the actual IP address of a computer when an event is raised and add the result in a new field. Is it possible to set a new field with powershell ?
<Exec>
if ($EventID == 11001) \
{\
exec_async("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", "-ExecutionPolicy", "ByPass", "-NonInteractive", "-Command", "(gwmi Win32_NetworkAdapterConfiguration | where {$_.IPEnabled}).IPAddress");\
}
</Exec>
