--- title: How to get a list of XML elements in (Windows 10) description: This reference topic for the IT professional explains how to use PowerShell to get a list of XML elements that can appear in . ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium author: tedhardyMSFT ms.date: 10/15/2018 --- # How to get a list of XML elements in EventData **Applies to** - Windows 10 The Security log uses a manifest where you can get all of the event schema. Run the following from an elevated PowerShell prompt: ```powershell $secEvents = get-winevent -listprovider "microsoft-windows-security-auditing" ``` The .events property is a collection of all of the events listed in the manifest on the local machine. For each event, there is a .Template property for the XML template used for the event properties (if there are any). For example: ```powershell PS C:\WINDOWS\system32> $SecEvents.events[100] Id : 4734 Version : 0 LogLink : System.Diagnostics.Eventing.Reader.EventLogLink Level : System.Diagnostics.Eventing.Reader.EventLevel Opcode : System.Diagnostics.Eventing.Reader.EventOpcode Task : System.Diagnostics.Eventing.Reader.EventTask Keywords : {} Template : Description : A security-enabled local group was deleted. Subject: Security ID: %4 Account Name: %5 Account Domain: %6 Logon ID: %7 Group: Security ID: %3 Group Name: %1 Group Domain: %2 Additional Information: Privileges: %8 PS C:\WINDOWS\system32> $SecEvents.events[100].Template ```