logs

$file=$ENV:TEMP
$date=$(get-date -f d)
Get-WinEvent -FilterHashTable @{LogName='System';LEVEL='1','2'} | Format-Table TimeCreated, ProviderName, Id, LevelDisplayName, Message -AutoSize -Wrap | Out-String -Width 1024 | Out-File "$file\$date.err"
Compress-Archive $file\*.err -DestinationPath D:\$date.zip
Remove-Item $file\*.err