FindConnectionsWithoutStartTls.ps1

function FindConnectionsWithoutSTARTTLS {
    param(
        $LocalEndpoint,

        [Parameter(ValueFromPipeline = $true, ValueFromPipelineByPropertyName = $true)]
        [Alias('FullName')]
        [string[]]$LogFile,
        $Header = @('date-time', 'connector-id', 'session-id', 'sequence-number', 'local-endpoint', 'remote-endpoint', 'event', 'data', 'context')
    )

    begin {
        $all = @{}
        $startTLS = @{}
        $localEndpointIp = $LocalEndpoint.Split(":")[0]
        $files = New-Object System.Collections.ArrayList
    }

    process {
        foreach ($file in $LogFile) {
            [void]$files.Add($file)
        }
    }
        
    end {
        $filesDone = 0
        foreach ($file in $files) {
            Write-Progress -Activity "Parsing log files" -Status "$filesDone / $($files.Count)" -PercentComplete ($filesDone * 100 / $files.Count)
            Import-Csv $file -Header $Header | % {
                if ($_.'local-endpoint' -eq $LocalEndpoint -and $_.'remote-endpoint' -notlike "$($localEndpointIp):*") {
                    $all[$_.'session-id'] = $_.'remote-endpoint'
                    if ($_.'data' -eq 'STARTTLS') {
                        $startTLS[$_.'session-id'] = 1
                    }
                }
            }

            $filesDone++
        }

        $all.GetEnumerator() | ? { -not $startTLS.ContainsKey($_.Name) }
    }
}

...