Where Object - PowerShell


Where-Object filters objects in a collection based on a specified condition. It evaluates each object and returns only those that match the criteria. This is a powerful tool for selecting specific data from large datasets and performing targeted operations.


Where-Object { [<ScriptBlock>] }
Where-Object -FilterScript { [<ScriptBlock>] }

Required Arguments:

  • ScriptBlock: A PowerShell script block that defines the filtering criteria.


  • -FilterScript: Alias for the ScriptBlock argument.
  • -CaseSensitive: Enables case-sensitive filtering. By default, filtering is case-insensitive.
  • -ErrorAction: Specifies how errors encountered during filtering should be handled. Default: Continue.


Example 1: Filter files by size

Get-ChildItem -Path C:\Users\John | Where-Object { $_.Length -gt 1MB }

Example 2: Find processes with a specific window title

Get-Process | Where-Object { $_.MainWindowTitle -eq "Notepad" }

Example 3: Use multiple criteria for complex filtering

Get-EventLog -LogName System | Where-Object { $_.EntryType -eq "Error" -and $_.Source -eq "Service Control Manager" }

Common Issues

  • Ensure the ScriptBlock is valid PowerShell syntax.
  • Use the -CaseSensitive flag if the filter should be case-sensitive.
  • Handle errors appropriately using the -ErrorAction flag to avoid unexpected behavior.


Where-Object can be combined with other commands like Select-Object, ForEach-Object, and Export-CSV to filter data, perform operations on the filtered objects, and save the results. Here’s an example command chain:

Get-EventLog -LogName System | Where-Object { $_.EntryType -eq "Error" } | Select-Object EntryType, Source, Message | Export-CSV C:\Errors.csv
  • Get-ChildItem: Retrieves files and folders from a specified location.
  • Get-Process: Returns information about running processes.
  • Get-EventLog: Reads entries from event logs.
  • Select-Object: Selects specified properties from objects.
  • ForEach-Object: Executes a script block for each object in a collection.
  • Export-CSV: Exports objects to a CSV file.