Advertisement
 

To print: Select File and then Print from your browser's menu

--------------------------------------------------------------
This story was printed from ZDNet Asia.
--------------------------------------------------------------
Create event log entries in Windows Server 2003
By Derek Schauland
Tuesday, January 15 2008 03:15 PM
URL: http://www.zdnetasia.com/techguide/windows/0,39044904,62036512,00.htm

Windows Server 2003 logs many types of events for all sorts of events, including applications, system events, and security items. These event logs are helpful in tracking down performance issues and problems with the operating system or applications running on the server. You may find log entries especially useful for recording other events to the log by using the Windows Server 2003's command line utility. You can issue this utility within a batch file to record the actions of the batch file or call upon it during an installation to an event log.

The Event Create command for creating an event log entry is EventCreate. Executing the EventCreate command with the /? argument provides the commands shown in the table below.

C:> eventcreate /S \\servername /L Application /T Success /SO Application Name /ID 1754 /D "Description of event"

You can record any event to the logs with this command. Windows Server 2003 adds many events to the logs without user intervention, but any custom scripts you create to assist you in performing any tasks may not remain recorded on your system unless you record them.

Argument Action
/S Specify the name of the remote system to connect to when recording the event
/U Specify a username to record the event as necessary
/P Specify a password for the given username; Prompts for input when a password is not specified.
/L Specify the log to record the event (e.g., Application, System, Security)
/T Specify the type of event; valid types include SUCCESS, ERROR, WARNING, INFORMATION
/SO Specify the source of the event (e.g., WinWord for Microsoft Word)
/ID Specify an ID for the event between 1 and 1000 (no commas accepted)
/D Specifies the description of the event to be entered; it requires surrounding quotation marks

When performing automated tasks on remote systems, recording the automated tasks to the event logs can help you or other administrators understand what actions you performed and how the system responded.

Note: The EventCreate command also works on Windows XP and Vista systems.