---

Get-WinEvent -FilterHashtable @{
    LogName='System'
    StartTime=(Get-Date).AddMinutes(-30)
} |
Where-Object { $_.Id -in 7000,7009,7031 -and $_.Message -match 'vipnet|Iplir' } |
Select-Object TimeCreated,Id,Message |
Format-List