Powershell get count of values in a column

Question

#Function to get all user logons in the past 10 days
function get-logonhistory{
Param (
 [string]$Computer = (Read-Host Remote computer name),
 [int]$Days = 10
 )
 cls
 $Result = @()
 $ELogs = Get-EventLog System -Source Microsoft-Windows-WinLogon -After (Get-Date).AddDays(-$Days) -ComputerName $Computer
 If ($ELogs)
 { 
 ForEach ($Log in $ELogs)
 { If ($Log.InstanceId -eq 7001)
   { $ET = "Logon"
   }
   Else
   { Continue
   }
   $Result += New-Object PSObject -Property @{
    Time = $Log.TimeWritten
    'Event Type' = $ET
    User = (New-Object System.Security.Principal.SecurityIdentifier $Log.ReplacementStrings[1]).Translate([System.Security.Principal.NTAccount])
   }
 }
 $Result | Select Time,"Event Type",User | Sort Time -Descending
 }
 Else
 { Write-Host "Problem with $Computer."
 Write-Host "If you see a 'Network Path not found' error, try starting the Remote Registry service on that computer."
 Write-Host "Or there are no logon/logoff events (XP requires auditing be turned on)"
 }
}

#list of usernames
get-logonhistory -Computer . | select User

The code above gives me a list of usernames. I want to get a count of each username and select the one with the highest count. How would I do this in Powershell?

Errors, it says the object does not implement "IComparable"

Pickle
– Pickle

2018-03-27 18:01:14 +00:00
Commented Mar 27, 2018 at 18:01 — Pickle
– Pickle, Commented Mar 27, 2018 at 18:01

vrdse · Accepted Answer · 2018-03-27 18:04:17Z

3

Pipe your output object to Group-Object to group, then Sort-Object by Count and the first entry will be the username with highest count.

Get-LogonHistory | Group-Object -Property User | Sort-Object -Property Count | Select-Object -First 1

answered Mar 27, 2018 at 18:04

vrdse

3,24413 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Powershell get count of values in a column

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related