Displays the event logs of the local or a remote computer in Event Viewer. (Show-EventLog)
NAMEShow-EventLogSYNOPSISDisplays the event logs of the local or a remote computer in Event Viewer.SYNTAXShow-EventLog [[-ComputerName] <string>] [<CommonParameters>]DESCRIPTIONThe Show-EventLog cmdlet opens Event Viewer on the local computer and displays in it all of the classic event logs on the local computer or a remote computer. To open Event Viewer on Windows Vista and later versions of Windows, the current user must be a member of the Administrators group on the local computer. The cmdlets that contain the EventLog noun (the EventLog cmdlets) work only on classic event logs. To get events from logs that use the Windows Event Log technology in Windows Vista and later versions of Windows, use Get-WinEvent.PARAMETERS-ComputerName <string> Specifies a remote computer. Show-EventLog displays the event logs from the specified computer in Event Viewer on the local computer. The default is the local computer. Type the NetBIOS name, an Internet Protocol (IP) address, or a fully qualified domain name of a remote computer. This parameter does not rely on Windows PowerShell remoting. You can use the ComputerName parameter of Get-EventLog even if your computer is not configured to run remote commands. Required? false Position? 1 Default value . Accept pipeline input? false Accept wildcard characters? false <CommonParameters> This cmdlet supports the common parameters: Verbose, Debug, ErrorAction, ErrorVariable, WarningAction, WarningVariable, OutBuffer and OutVariable. For more information, type, "get-help about_commonparameters".INPUTSNone You cannot pipe input to this cmdlet.OUTPUTSNone This cmdlet does not generate any output.NOTESThe Windows PowerShell command prompt returns as soon as Event Viewer opens. You can work in the current session while Event Viewer is open. Because this cmdlet requires a user interface, it does not work on Server Core installations of Windows Server.Examples
EXAMPLE 1C:\PS>show-eventlogDescription----------- This command opens Event Viewer and displays in it the classic event logs on the local computer.EXAMPLE 2C:\PS>show-eventlog -computername Server01Description----------- This command opens Event Viewer and displays in it the classic event logs on the Server01 computer. RELATED LINKS Online version: http://go.microsoft.com/fwlink/?LinkID=135257 Clear-EventLog Get-EventLog Limit-EventLog New-EventLog Remove-EventLog Write-EventLog Get-WinEvent C:\Windows>powershell get-help New-EventLog -full
Microsoft Windows [Version 10.0.19045.3693]
Copyright (c) 2023 Microsoft Corporation.
ColorConsole [Version 3.7.1000] PowerShell 2.0-Export