Search specific event ID

import-csvC:\temp\Comp.csv| %{Get-WinEvent -ComputerName $_.ComputerName -FilterHashtable @{logname =System’; id = 1074} -MaxEvents 3 }

Sysinternal psloglist

psloglist \testRDS6a,testRDS6b,testRPT6,testRpt6a -a 04/21/21 -b 04/23/21 -i 1074 -o User32 -s -x >report.csv