Reads events from the Cisco AnyConnect Secure Mobility Client to generate something close to the Message History from the client.

Get-AnyConnectMessageHistory.ps1

function Get-AnyConnectMessageHistory {
    $regex = [regex]'Message type information sent to the user:|Message type prompt sent to the user:'
    $WinEvents = Get-WinEvent -LogName 'Cisco AnyConnect Secure Mobility Client' | Where-Object { $_.Message -match $regex } | ForEach-Object {
        $Event = $_
        $_ | Add-Member -MemberType NoteProperty -Name 'MessageSentToUser' -Value ($Event | Select-Object -ExpandProperty Message | ForEach-Object { ($_ -replace $regex, '').Trim() } | Where-Object { $_ })
        if ( [System.String]::IsNullOrEmpty($_.MessageSentToUser) -eq $true ) { $_.MessageSentToUser = 'Waiting for user response.' }
        $_ | Add-Member -MemberType NoteProperty -Name 'Date' -Value (Get-Date -Date $_.TimeCreated -Format d)
        $_ | Add-Member -MemberType NoteProperty -Name 'Time' -Value (Get-Date -Date $_.TimeCreated -Format "h:mm:ss tt")
        $_
    }

    $WinEvents | Sort-Object -Property TimeCreated | Group-Object -Property Date | ForEach-Object {
        $GroupItems = $_
        $Date = $GroupItems.Name
        $Entries = (($GroupItems | Select-Object -ExpandProperty Group | ForEach-Object {
            "`t$($_.Time) $($_.MessageSentToUser)"
        }) | Select-Object -Unique) -join "`r`n"
        "$($Date)`r`n$($Entries)"
    }
}