First retrieve what is currently logged on a specific server. You can retrieve this information as follows : Get-EventLoglevel -server Servername This will retrieve a list similar to this : MSExchange ActiveSyncRequests Lowest MSExchange ActiveSyncConfiguration Lowest MSExchange AntispamGeneral Lowest MSExchange AssistantsAssistants Lowest MSExchange AutodiscoverCore Lowest MSExchange AutodiscoverWeb Lowest MSExchange AutodiscoverProvider Lowest MSExchange AvailabilityAvailability Service Lowest ...