Yanick - You should format using PowerShell since they all can be considered objects, then write-out the output into a csv format or something...
See my implementation here for example
Thanks Richard, I already had that solution, but this is what I don't want to do. Stripping the carriage returns and line feed completely makes the message field pretty hard to read in some cases, but we just have no other choice.
However, I would change this:
$evtMSG = $_.Message -replace "`r`n",""`
To that though:
$evtMSG = $_.Message -replace "`r`n"," | "`
Or something similar so that we can tell where the original line breaks would be. The security facility of the event log contains line feeds in pretty much all records.
I was just hoping there was a way to use grammars for this, but I guess it wasn't meant for that purpose to begin with.