Event Collector Command Line Utility
wecutil
- C:\Windows\system32\wecutil.exe /?
Output:
Windows Event Collector Utility
Enables you to create and manage subscriptions to events forwarded from remote
event sources that support WS-Management protocol.
Usage:
You can use either the short (i.e. es, /f) or long (i.e. enum-subscription, /format)
version of the command and option names. Commands, options and option values are
case-insensitive.
(ALL UPPER-CASE = VARIABLE)
wecutil COMMAND [ARGUMENT [ARGUMENT] ...] [/OPTION:VALUE [/OPTION:VALUE] ...]
Commands:
es (enum-subscription) List existent subscriptions.
gs (get-subscription) Get subscription configuration.
gr (get-subscriptionruntimestatus) Get subscription runtime status.
ss (set-subscription) Set subscription configuration.
cs (create-subscription) Create new subscription.
ds (delete-subscription) Delete subscription.
rs (retry-subscription) Retry subscription.
qc (quick-config) Configure Windows Event Collector service.
Common options:
/h|? (help)
Get general help for the wecutil program.
wecutil { -help | -h | -? }
For arguments and options, see usage of specific commands:
wecutil COMMAND -?
Return Code: 0
C:\Windows\system32\wecutil.exe
c:\>ver
Microsoft Windows [Version 10.0.19045.2075]
| File | Info |
|---|---|
| File Size | 107008bytes |
| Creation Time | 2022/07/08 08:48:49 |
| LastWrite Time | 2022/07/08 08:48:49 |
| ProductVersion | 10.0.19041.1 |
| FileVersion | 10.0.19041.1 (WinBuild.160101.0800) |
| Hash | Value |
|---|---|
| MD5 | b78753f05e058638cd0a0169d8f69ef7 |
| SHA1 | c6eff962ad0cb28537009fb8aa025a59eac70604 |
| SHA224 | 68ee3c272195fde7505822e8e4197c8ff47db75bdd0aaae7cff41cc6 |
| SHA256 | 8270bb4468b3fc5c2ea6fe92a550de517992dd2f84e195124cfef358f1c8ea5a |
| SHA384 | ec4f353984df4adccd2fe57cb8d15d1a5fe4f0209b5f1374f3eb4d257f3e4dc9f917d9ab38df7a105c3fcec4ac60d6ee |
| SHA512 | d4ae7c00f70dfa9e3ab7847d9a51d7e65652d11d4d80c2808f090f714ec341a31b8106d1412794e390577ed7c38a18cda4bdaf58fc621c40a22a717be867fca8 |