Show-eventLog

Display the event logs of the local or a remote computer in Event Viewer.

Syntax
      Show-EventLog [[-ComputerName] string] [CommonParameters]

Key:
   -ComputerName string[]
       Specify a remote computer. The default is the local computer.
       Type the NetBIOS name, an Internet Protocol (IP) address, or a
       fully qualified domain name of a remote computer.
       This parameter does not rely on PowerShell remoting.

   CommonParameters:
       -Verbose, -Debug, -ErrorAction, -ErrorVariable, -WarningAction, -WarningVariable,
       -OutBuffer -OutVariable.

Remove-EventLog will delete an event log file and unregister all of its event sources for the log. This cmdlet can also be used to unregister event sources without deleting any event logs.

The EventLog cmdlets work only on classic event logs. To get events from logs that use the Windows Event Log technology in Windows Vista and later versions of Windows, use Get-WinEvent.

Examples

Open Event Viewer and display the classic event logs from the local computer:

PS C:\> show-eventlog

Open Event Viewer and display the classic event logs from server64 :

PS C:\> show-eventlog -computername Server64

“Don't tell me where your priorities are. Show me where you spend your money and I'll tell you what they are” ~ James W. Frick

Related:

Get-Eventlog - Get event log data
New-Eventlog
- Create a new event log and a new event source


© Copyright SS64.com 1999-2013
Some rights reserved