通过powershell操作eventlog

relevant command list

复制代码
~\Desktop> (Get-Command Write-EventLog).Parameters

Key                 Value
---                 -----
WarningAction       System.Management.Automation.ParameterMetadata
RawData             System.Management.Automation.ParameterMetadata
Verbose             System.Management.Automation.ParameterMetadata
WarningVariable     System.Management.Automation.ParameterMetadata
ErrorAction         System.Management.Automation.ParameterMetadata
Category            System.Management.Automation.ParameterMetadata
InformationAction   System.Management.Automation.ParameterMetadata
ErrorVariable       System.Management.Automation.ParameterMetadata
Source              System.Management.Automation.ParameterMetadata
PipelineVariable    System.Management.Automation.ParameterMetadata
EventId             System.Management.Automation.ParameterMetadata
OutVariable         System.Management.Automation.ParameterMetadata
Debug               System.Management.Automation.ParameterMetadata
InformationVariable System.Management.Automation.ParameterMetadata
ComputerName        System.Management.Automation.ParameterMetadata
EntryType           System.Management.Automation.ParameterMetadata
Message             System.Management.Automation.ParameterMetadata
LogName             System.Management.Automation.ParameterMetadata
OutBuffer           System.Management.Automation.ParameterMetadata
AsJob               System.Management.Automation.ParameterMetadata
复制代码

 

Write-EventLog

Write-EventLog -Source "SupperSocketService" -LogName "TestLog" -Message "test on 20180928" -EventId 3001

 

New-EventLog

This command was used to create a new source

New-EventLog -Source "SupperSocketService" -LogName "TestLog" -MessageResourceFile "C:\Test\TestApp.dll"

 

Remove-EventLog

Remove-EventLog -LogName "TestLog"

 

Get-EventLog 

Get-EventLog -List

复制代码
 Max(K) Retain OverflowAction        Entries Log
  ------ ------ --------------        ------- ---
  51,200      0 OverwriteAsNeeded       4,852 Application
     512      7 OverwriteOlder              0 Dell
  20,480      0 OverwriteAsNeeded           0 HardwareEvents
     512      7 OverwriteOlder              0 Internet Explorer
     512      7 OverwriteOlder            722 isaAgentLog
  10,240      0 OverwriteAsNeeded      21,192 Kaspersky Event Log
  20,480      0 OverwriteAsNeeded           0 Key Management Service
     512      7 OverwriteOlder              8 Lisa
     128      0 OverwriteAsNeeded         179 OAlerts
     512      7 OverwriteOlder              0 PreEmptive
   8,192      0 OverwriteAsNeeded       2,692 Red Gate Software
  51,200      0 OverwriteAsNeeded      24,441 Security
     512      7 OverwriteOlder              1 SupperSocketService
  51,200      0 OverwriteAsNeeded      20,441 System
  20,480      7 OverwriteOlder          1,460 VisualSVNServer
  20,480      7 OverwriteOlder              0 VisualSVNServerActivity
  20,480      7 OverwriteOlder            490 VisualSVNServerBackgroundJobs
  20,480     -1 DoNotOverwrite              0 VisualSVNServerManagement
  20,480      7 OverwriteOlder              0 VisualSVNServerReplication
     512      7 OverwriteOlder              0 Windows Azure
  15,360      0 OverwriteAsNeeded      12,678 Windows PowerShell
复制代码

 

作者:Chuck Lu    GitHub
posted @   ChuckLu  阅读(1223)  评论(0)  编辑  收藏  举报
编辑推荐：
· 记一次.NET内存居高不下排查解决与启示
· 探究高空视频全景AR技术的实现原理
· 理解Rust引用及其生命周期标识（上）
· 浏览器原生「磁吸」效果！Anchor Positioning 锚点定位神器解析
· 没有源码，如何修改代码逻辑？
阅读排行：
· 全程不用写代码，我用AI程序员写了一个飞机大战
· DeepSeek 开源周回顾「GitHub 热点速览」
· MongoDB 8.0这个新功能碉堡了，比商业数据库还牛
· 记一次.NET内存居高不下排查解决与启示
· 白话解读 Dapr 1.15：你的「微服务管家」又秀新绝活了
历史上的今天：
2017-09-28 SwitchyOmega
2017-09-28 What's the difference between Unicode and UTF-8?
2015-09-28 让Outlook一直保持开启
点击右上角即可分享
微信分享提示