---

Get-WinEvent -FilterHashtable @{LogName='Application'; StartTime=(Get-Date).AddHours(-4)} |
Where-Object { $_.Message -match 'Swagent|vipnetswagent' } |
Select-Object TimeCreated, Id, ProviderName, Message |
Format-List