Find collection rule for specific Event Id
Find collection rule for specific Event Id
Foreach ($rule in (get-rule | where {$_.category -eq "EventCollection"} | foreach-object {$_.DataSourceCollection}))
{
if ($rule.get_Configuration() -match ">event_number<")
{$rule.get_ParentElement().DisplayName}
}
main menu
