Event Create - Creates a custom event in an event log
eventcreate
- C:\Windows\system32\eventcreate.exe /?
Output:
EVENTCREATE [/S system [/U username [/P [password]]]] /ID eventid
[/L logname] [/SO srcname] /T type /D description
Description:
This command line tool enables an administrator to create
a custom event ID and message in a specified event log.
Parameter List:
/S system Specifies the remote system to connect to.
/U [domain\]user Specifies the user context under which
the command should execute.
/P [password] Specifies the password for the given
user context. Prompts for input if omitted.
/L logname Specifies the event log to create
an event in.
/T type Specifies the type of event to create.
Valid types: SUCCESS, ERROR, WARNING, INFORMATION.
/SO source Specifies the source to use for the
event (if not specified, source will default
to 'eventcreate'). A valid source can be any
string and should represent the application
or component that is generating the event.
/ID id Specifies the event ID for the event. A
valid custom message ID is in the range
of 1 - 1000.
/D description Specifies the description text for the new event.
/? Displays this help message.
Examples:
EVENTCREATE /T ERROR /ID 1000
/L APPLICATION /D "My custom error event for the application log"
EVENTCREATE /T ERROR /ID 999 /L APPLICATION
/SO WinWord /D "Winword event 999 happened due to low diskspace"
EVENTCREATE /S system /T ERROR /ID 100
/L APPLICATION /D "Custom job failed to install"
EVENTCREATE /S system /U user /P password /ID 1 /T ERROR
/L APPLICATION /D "User access failed due to invalid user credentials"
Return Code: 0
C:\Windows\system32\eventcreate.exe
c:\>ver
Microsoft Windows [Version 10.0.19045.2075]
| File | Info |
|---|---|
| File Size | 44544bytes |
| Creation Time | 2019/12/07 18:09:30 |
| LastWrite Time | 2019/12/07 18:09:30 |
| ProductVersion | 10.0.19041.1 |
| FileVersion | 10.0.19041.1 (WinBuild.160101.0800) |
| Hash | Value |
|---|---|
| MD5 | 091ffa3893661c5597ca719f28ee03ea |
| SHA1 | c80d0792ecfca2113958c0a8805d3d99fdf58a76 |
| SHA224 | 450abae9e152ad187cc2bd88464e18c5e4956793310fe71ef76be04e |
| SHA256 | 7cc501292377dc849a34214f017f62a7331f44f96bc6fe3e566253a9918bf811 |
| SHA384 | 114a305b52470d8fd3e517b45a3b1341fa61e3a780bf628c7f005ebee42b230ec5b952a608ebde2daa451e03d70d2092 |
| SHA512 | 8503ad99472b223b4f10de64a09e8b06a52fb785f102e10803fdb16ac675251c26ff1e4723b9e938b9da24c10b71b4375906d86dc31aa154514c9d76a69023bc |