Here's an example of my working wmi query:
@(gwmi -query "select * from win32_ntlogevent where eventtype=1 and timegenerated > '12/1/2017'").count
It appears that I can only use the query section, but that doesn't appear to have a count function. Also I would like the date to be a variable for today eventually if that is possible as well.
Thanks!
