Skip to main content

Uses of Windows Events Command Line Utility in retrieving the information about event logs and publishers

If you’re looking for retrieving information about event logs and publishers, the Window Event Command Line Utility (Wevtutil.exe) is the perfect choice for you. Using this utility, you can install and uninstall event manifests; run queries; and export, archive, and clear logs from an elevated command prompt. You can use either the short (ep /uni) or long (enum-publishers /unicode) version of the command and option names, and all commands, options, and option values are case insensitive.

Following is the general syntax of the Wevtutil.exe
wevtutil command [argument [argument] ...] [/option:value [/option:value] ...]

Here command can be any of the following:
•    al (archive-log) Archives an exported log.
•   cl (clear-log) Clears a log.
•    el (enum-logs) Lists log names.
•    ep (enum-publishers) Lists event publishers.
•   epl (export-log) Exports a log.
•    gl (get-log) Gets log configuration information.
•    gli (get-log-info) Gets log status information.
•    gp (get-publisher) Gets publisher configuration information.
•    im (install-manifest) Installs event publishers and logs from manifest.
•   qe (query-events) Queries events from a log or log file.
•   sl (set-log) Modifies configuration of a log.
•    um (uninstall-manifest) Uninstalls event publishers and logs from manifest.

Then, following are the common options
•    /r:value (remote) If you specify this command, it will run on a remote Computer named value. You have to remember that im (install-manifest) and um (uninstall-manifest) do not support remote operation.
•    /u:value (username) This command specifies a different user to log on to the remote Computer. Moreover, here the value is a user name in the form of domain\user or user. Then, this option is only applicable when you specify the option /r (remote).
•    /p:value (password) This command specifies a password for the specified user. If you don’t specify or the value is "*", you will be prompted to enter a password.  Remember that this option is applicable only when you specify /u (username) option.
•    /a:value (authentication) This command is able to authenticate type for connecting to a remote Computer. The value can be default, Negotiate, Kerberos, or NTLM.
•    /uni:value (unicode) This command is able to display output in Unicode. Value can be true or false (if true, output is in Unicode).
•    If you want to know more about a specify command, just type wevtutil command /? at an elevated Command Prompt.
•    This will let you know more about the commands.


Popular posts from this blog

New Micro battery, power packed for high performance

For a size of a few millimetres, the new micro-batteries are powerful enough to jump start a car battery and then quickly charge the cell phone. Researchers from the University of Illinois have developed the micro batteries which can be used to drive compact electronic devices and new applications for radio communications. The micro batteries are so good that they can even out power the super capacitors. The results were published in ‘Nature Communications’ in the April 16 issue. The micro batteries have energy and power and with the researchers tweaking the structure of the micro batteries a little bit, its use can be for wide range applications. The high performance of the micro battery is based on its 3-dimensional micro-structure. Based on the design of fast charging cathode by Professor Paul Braun’s group, researchers developed the matching anode and integrated it with the fast charging cathode at a micro-scale and made a complete battery with high performance. These batteries cou

HTC Touch Diamond SmartPhone!

The phones design is an innovative in which the user has the geometric form language to make sure a clutter-free environment for screening content. The San Francisco based studio One & Co collaborated with HTC Taiwan Design team to create Diamond HTC smartphone. The HTC phone is quite wonderful with design and the rapid development in the smartphone market the HTC has taken innovative steps to capture the SmartPhone market HTC develops these kind of new inventive designs. Inspired

Google Health Login Page is Ready!

Google's Marissa Mayer announced that the Google Health will be launched on 2008. The service of the Google Health Login Page is ready. It's only the first intro page is displayed and I didn't get passed to the next page. In the same page y0u can see the information displaying on the Google Health. If you point your mouse on the below link you can visit the Google Health Page With Google Health, you can: * Build online health profiles that belong to you * Download medical records from doctors and pharmacies * Get personalized health guidance and relevant news * Find qualified doctors and connect to time-saving services * Share selected information with family or caregivers This will be a nice development about caring health and this will helps in having some cautious about health. Inspired