---

Get-WinEvent -FilterHashtable @{
    LogName='Application'
    Id=1000
    StartTime=(Get-Date).AddMinutes(-30)
} -ErrorAction SilentlyContinue |
Select-Object TimeCreated,Id,ProviderName,
    @{N='Data';E={$_.Properties.Value -join ' | '}} |
Where-Object { $_.Data -match 'IplirControl|iplayer|TAO_PI' } |
Format-List