You can also use the command to view the logs of remote servers. Let’s say, you need to get the event logs on each and every Exchange Transport server. Normally, you would go through every one of them.

Using a combination of the above commands along with the **Get-TransportService**, you will get the events from all the Transport servers.

The complete script is similar to the following.

~~~~ $servers = Get-TransportService; foreach ($server in $servers) {Write-Host "Scanning the event log of: " -NoNewLine; Write-Host $server; Get-EventLog system -ComputerName $server -After (Get-Date).AddHours(-12) | where {($_.EntryType -Match "Error") -or ($_.EntryType -Match "Warning")} | ft -wrap >> "C:/$server.csv"; Get-EventLog application -ComputerName $server -After (Get-Date).AddHours(-12) | where {($_.EntryType -Match "Error") -or ($_.EntryType -Match "Warning")} | ft -wrap >> "C:/$server.csv"} ~~~~

This will save the results from each Exchange Server where it matches the error and save it to the C drive with the server’s name prefix. You will get a similar output.

You can use the **Get-WinEvent** or **Get-EventLog** command, depending on the case. However, you can also use a mix of both.