diff --git a/DeepBlue.ps1 b/DeepBlue.ps1
index 24e86f4..b9a8e63 100644
--- a/DeepBlue.ps1
+++ b/DeepBlue.ps1
@@ -518,7 +518,7 @@ function Main {
             # Check command lines
             if ($event.id -eq 1){
                 $creator=$eventXML.Event.EventData.Data[14]."#text"
-                $commandline=$eventXML.Event.EventData.Data[4]."#text"
+                $commandline=$eventXML.Event.EventData.Data[10]."#text"
                 if ($commandline){
                     Check-Command -EventID 1
                 }