What is the command to open windows event viewer displaying a particular node details?
For example if I simply use eventvwr
command; it opens the UI with Root Node selected. I want Application
node selected when it is opened开发者_如何学运维 OR any other node.
Can it be configured programatically?
Thanks.
To view the eventvwr.exe arguments simply type:
eventvwr /?
To specifically open the Application log use the command below:
eventvwr computername /l:"%SystemRoot%\System32\Winevt\Logs\Application.evtx"
For an Application node you'd call it as such:
eventvwr /c:Application
I don't think you can. Your best option is to create a custom view - to filter the events from some specific apps if thats what you want. For command line, 'eventvwr /f' can be used to specify filter.
精彩评论