Get-WinEvent -FilterHashtable @{LogName='Application'; ProviderName='Application Error'} -MaxEvents 30 -ErrorAction SilentlyContinue | Where-Object { $_.Message -match 'gui_probe' } | Select-Object -First 3 | ForEach-Object { $_.TimeCreated; $_.Message; '====' }