Windows® Command-Line Administration: Instant Reference

Chapter 13

Monitoring System Events

In this chapter, you will learn to:

• Create Simple System Events
• Trigger System Events
  • Create an Event
  • Delete an Event
  • Query an Event
• Manage Event Information
  • Display a List of Publishers
  • Get a Publisher
  • Enumerate the Logs
  • Query Log Events
  • Get a Log
  • Get Log Status Information
  • Set a Log
  • Export a Log
  • Archive a Log
  • Clear a Log

The event log used to be a simple affair that contained a few folders or logs. The System log contained system-level events generated by the operating system, the Application log contained application-generated events, and the Security log contained security events, such as audits. Newer versions of Windows also contain these three logs, but now you have a complex affair of specialty ...