eventcreate

Event Create - Creates a custom event in an event log

Event Create - Creates a custom event in an event log


eventcreate

  • C:\Windows\system32\eventcreate.exe /?

Output:


EVENTCREATE [/S system [/U username [/P [password]]]] /ID eventid
            [/L logname] [/SO srcname] /T type /D description

Description:
    This command line tool enables an administrator to create
    a custom event ID and message in a specified event log.

Parameter List:
    /S    system           Specifies the remote system to connect to.

    /U    [domain\]user    Specifies the user context under which
                           the command should execute.

    /P    [password]       Specifies the password for the given
                           user context. Prompts for input if omitted.

    /L    logname          Specifies the event log to create
                           an event in.

    /T    type             Specifies the type of event to create.
                           Valid types: SUCCESS, ERROR, WARNING, INFORMATION.

    /SO   source           Specifies the source to use for the
                           event (if not specified, source will default
                           to 'eventcreate'). A valid source can be any
                           string and should represent the application
                           or component that is generating the event.

    /ID   id               Specifies the event ID for the event. A
                           valid custom message ID is in the range
                           of 1 - 1000.

    /D    description      Specifies the description text for the new event.

    /?                     Displays this help message.


Examples:
    EVENTCREATE /T ERROR /ID 1000
        /L APPLICATION /D "My custom error event for the application log"

    EVENTCREATE /T ERROR /ID 999 /L APPLICATION
        /SO WinWord /D "Winword event 999 happened due to low diskspace"

    EVENTCREATE /S system /T ERROR /ID 100
        /L APPLICATION /D "Custom job failed to install"

    EVENTCREATE /S system /U user /P password /ID 1 /T ERROR
        /L APPLICATION /D "User access failed due to invalid user credentials"

Return Code: 0


C:\Windows\system32\eventcreate.exe
c:\>ver
Microsoft Windows [Version 10.0.19045.2075]
FileInfo
File Size44544bytes
Creation Time2019/12/07 18:09:30
LastWrite Time2019/12/07 18:09:30
ProductVersion10.0.19041.1
FileVersion10.0.19041.1 (WinBuild.160101.0800)
HashValue
MD5091ffa3893661c5597ca719f28ee03ea
SHA1c80d0792ecfca2113958c0a8805d3d99fdf58a76
SHA224450abae9e152ad187cc2bd88464e18c5e4956793310fe71ef76be04e
SHA2567cc501292377dc849a34214f017f62a7331f44f96bc6fe3e566253a9918bf811
SHA384114a305b52470d8fd3e517b45a3b1341fa61e3a780bf628c7f005ebee42b230ec5b952a608ebde2daa451e03d70d2092
SHA5128503ad99472b223b4f10de64a09e8b06a52fb785f102e10803fdb16ac675251c26ff1e4723b9e938b9da24c10b71b4375906d86dc31aa154514c9d76a69023bc
Built with Hugo
Theme Stack designed by Jimmy