EventCreate is a Windows CMD command that allows users to create a custom event in the Windows Event Log. This command is a part of the Windows System Administration Tools, which are used to manage the Windows operating system. EventCreate can be used to create events of different types, such as information, warning, error, success audit, and failure audit. This command is useful for troubleshooting and monitoring the system, as it allows users to create custom events that can be used to track system activities.
Syntax of the EventCreate CMD Command
The syntax of the EventCreate CMD command is as follows:
eventcreate [/s Computer [/u Domain\User [/p Password]]] [/l {Application | System | Security}] [/so Source] [/t {Error | Warning | Information | SuccessAudit | FailureAudit}] [/id EventID] [/d Description] [/v Data]
The parameters used in the EventCreate CMD command are:
- /s Computer: This parameter is used to specify the name of the computer on which the event is to be created.
- /u Domain\User: This parameter is used to specify the user name and domain of the user who is creating the event.
- /p Password: This parameter is used to specify the password of the user who is creating the event.
- /l {Application | System | Security}: This parameter is used to specify the log in which the event is to be created. The available options are Application, System, and Security.
- /so Source: This parameter is used to specify the source of the event.
- /t {Error | Warning | Information | SuccessAudit | FailureAudit}: This parameter is used to specify the type of the event. The available options are Error, Warning, Information, SuccessAudit, and FailureAudit.
- /id EventID: This parameter is used to specify the ID of the event.
- /d Description: This parameter is used to specify the description of the event.
- /v Data: This parameter is used to specify the data associated with the event.
Examples of the EventCreate CMD Command
The following are some examples of how the EventCreate CMD command can be used:
-
To create an event in the Application log on the local computer, use the following command:
eventcreate /l Application /so MyApp /t Information /id 1000 /d “MyApp event”
-
To create an event in the System log on a remote computer, use the following command:
eventcreate /s ComputerName /u Domain\User /p Password /l System /so MyApp /t Error /id 1000 /d “MyApp event”
-
To create an event in the Security log on a remote computer, use the following command:
eventcreate /s ComputerName /u Domain\User /p Password /l Security /so MyApp /t SuccessAudit /id 1000 /d “MyApp event” /v “Data associated with the event”
Conclusion
The EventCreate CMD command is a useful tool for creating custom events in the Windows Event Log. It can be used to create events of different types, such as information, warning, error, success audit, and failure audit. This command is useful for troubleshooting and monitoring the system, as it allows users to create custom events that can be used to track system activities. The syntax of the EventCreate CMD command is provided above, along with some examples of how it can be used.