New-EventLog - PowerShell command help and examples

Creates a new event log and a new event source on a local or remote computer. (New-EventLog)


NAME
New-EventLog
SYNOPSIS
Creates a new event log and a new event source on a local or remote computer.
SYNTAX
New-EventLog [-LogName] <string> [-Source] <string[]> [[-ComputerName] <string[]>] [-CategoryResourceFile <string>] [-MessageResourceFile <string>] [-ParameterResourceFile <string>] [<CommonParameters>]
DESCRIPTION
This cmdlet creates a new classic event log on a local or remote computer. It can also register an event source that writes to the new log or to an existing log. The cmdlets that contain the EventLog noun (the Event log cmdlets) work only on classic event logs. To get events from logs that use the Windows Event Log technology in Windows Vista and later versions of Windows, use Get-WinEvent.
PARAMETERS
-CategoryResourceFile <string> Specifies the path to the file that contains category strings for the source events. This file is also known as the Category Message File. The file must be present on the computer on which the event log is being created. This parameter does not create or move files. Required? false Position? named Default value Accept pipeline input? false Accept wildcard characters? false -ComputerName <string[]> Creates the new event logs on the specified computers. The default is the local computer. Type the NetBIOS name, an Internet Protocol (IP) address, or a fully qualified domain name of a remote computer. To specify the local computer, type the computer name, a dot (.), or "localhost". This parameter does not rely on Windows PowerShell remoting. You can use the ComputerName parameter of Get-EventLog even if your computer is not configured to run remote commands. Required? false Position? 3 Default value . Accept pipeline input? false Accept wildcard characters? false -LogName <string> Specifies the name of the event log. If the log does not exist, New-EventLog creates the log and uses this value for the Log and LogDisplayName properties of the new event log. If the log exists, New-EventLog registers a new source for the event log. Required? true Position? 1 Default value Accept pipeline input? false Accept wildcard characters? false -MessageResourceFile <string> Specifies the path to the file that contains message formatting strings for the source events. This file is also known as the Event Message File. The file must be present on the computer on which the event log is being created. This parameter does not create or move files. Required? false Position? named Default value Accept pipeline input? false Accept wildcard characters? false -ParameterResourceFile <string> Specifies the path to the file that contains strings used for parameter substitutions in event descriptions. This file is also known as the Parameter Message File. The file must be present on the computer on which the event log is being created. This parameter does not create or move files. Required? false Position? named Default value Accept pipeline input? false Accept wildcard characters? false -Source <string[]> Specifies the names of the event log sources, such as application programs that write to the event log. This parameter is required. Required? true Position? 2 Default value Accept pipeline input? false Accept wildcard characters? false <CommonParameters> This cmdlet supports the common parameters: Verbose, Debug, ErrorAction, ErrorVariable, WarningAction, WarningVariable, OutBuffer and OutVariable. For more information, type, "get-help about_commonparameters".
INPUTS
None You cannot pipe input to this cmdlet.
OUTPUTS
System.Diagnostics.EventLogEntry
NOTES
To use New-EventLog on Windows Vista and later versions of Windows, open Windows PowerShell with the "Run as administrator" option. To create an event source in Windows Vista, Windows XP Professional, or Windows Server 2003, you must be a member of the Administrators group on the computer. When you create a new event log and a new event source, the system registers the new source for the new log, but the log is not created until the first entry is written to it. The operating system stores event logs as files. When you create a new event log, the associated file is stored in the %SystemRoot%\System32\Config directory on the specified computer. The file name is the first eight characters of the Log property with an .evt file name extension.

Examples

EXAMPLE 1
C:\PS>new-eventlog -source TestApp -logname TestLog -MessageResourceFile C:\Test\TestApp.dll
Description
----------- This command creates the TestLog event log on the local computer and registers a new source for it.
EXAMPLE 2
C:\PS>$file = "C:\Program Files\TestApps\NewTestApp.dll" C:\PS> new-eventlog -computername Server01 -source NewTestApp -logname Application -MessageResourceFile $file -CategoryResourceFile $file
Description
----------- This command adds a new event source, NewTestApp, to the Application log on the Server01 remote computer. The command requires that the NewTestApp.dll file is located on the Server01 computer. RELATED LINKS Online version: http://go.microsoft.com/fwlink/?LinkID=135235 Clear-EventLog Get-EventLog Limit-EventLog New-EventLog Remove-EventLog Show-EventLog Write-EventLog Get-WinEvent C:\Windows>powershell get-help Remove-EventLog -full

Microsoft Windows [Version 10.0.19045.3693]
Copyright (c) 2023 Microsoft Corporation.

ColorConsole [Version 3.7.1000] PowerShell 2.0-Export

Windows 11, 10, 8.1, 8, 7 / Server 2022, 2019, 2016











Windows-10


... Windows 10 FAQ
... Windows 10 How To


Windows 10 How To


... Windows 11 How To
... Windows 10 FAQ



PowerShell: Creates a new event log and a new event source on a local or remote computer.

HTTP: ... PS_Windows/en/New-EventLog.htm
0.093
16300

Maybe the Windows 11, 10 problem is related to the faulty RAM update!

Open the Experience Index files folder or start recalculation of the performance index!

Möchte meine Windows 11 Task-Leiste nicht zentriert!

Automatic Hide the Mouse Cursor ergo Pointer on Windows 10/8.1/7 ...!

Farbige Alternative zur cmd.exe Konsole!

Most viruses have mutated, some still have the typical Corona shape!



(0)