$ 0 0 Using select-string:Get-EventLog Security | where {$_.UserName | select-string -notmatch user1,user2}