Formats/LoginEvent.ps1xml
<?xml version="1.0" encoding="utf-8"?>
<Configuration> <ViewDefinitions> <View> <Name>SysAdminTools.LoginEvent</Name> <ViewSelectedBy> <TypeName>SysAdminTools.LoginEvent</TypeName> </ViewSelectedBy> <TableControl> <TableHeaders> <TableColumnHeader /> <TableColumnHeader /> <TableColumnHeader /> <TableColumnHeader /> <TableColumnHeader /> <TableColumnHeader /> <TableColumnHeader> <Label>Success</Label> </TableColumnHeader> <TableColumnHeader /> <TableColumnHeader> <Label>FailureReason</Label> </TableColumnHeader> </TableHeaders> <TableRowEntries> <TableRowEntry> <TableColumnItems> <TableColumnItem> <PropertyName>ComputerName</PropertyName> </TableColumnItem> <TableColumnItem> <PropertyName>UserName</PropertyName> </TableColumnItem> <TableColumnItem> <PropertyName>DomainName</PropertyName> </TableColumnItem> <TableColumnItem> <PropertyName>LogonType</PropertyName> </TableColumnItem> <TableColumnItem> <PropertyName>IPAddress</PropertyName> </TableColumnItem> <TableColumnItem> <PropertyName>RemoteComputer</PropertyName> </TableColumnItem> <TableColumnItem> <ScriptBlock> $Esc = [char]27 $color = switch ($_.Success){ {$_ -eq $True} {"92"} {$_ -eq $False} {"91"} } "$($Esc)[$($color)m$($_.Success)$($Esc)[39m" </ScriptBlock> </TableColumnItem> <TableColumnItem> <PropertyName>TimeCreated</PropertyName> </TableColumnItem> <TableColumnItem> <PropertyName>FailureReasonString</PropertyName> </TableColumnItem> </TableColumnItems> </TableRowEntry> </TableRowEntries> </TableControl> </View> </ViewDefinitions> </Configuration> |