C:\WINDOWS>EVENTCREATE /?
EVENTCREATE
[/S server
[/U användarnamn
[/P lösenord
]]] /ID
händelse-ID
[/L loggnamn
] [/SO källnamn
] /T typ /D beskrivning
Beskrivning:
Detta kommandoradsverktyg kan användas av administratörer för
att skapa egna händelse-ID och meddelanden i en viss loggbok.
Parameterlista:
/S server Anger vilken fjärrdator som ska
användas.
/U
[domän\
]anv. Anger under vilken användarkontext som
kommandot ska utföras.
/P
[lösenord
] Anger lösenord för den användare
anges. Du tillfrågas om detta inte
anges.
/L loggnamn Anger den loggbok som händelsen
ska skapas i.
/T typ Anger vilken sorts händelse som
skapas.
Giltiga typer är: SUCCESS, ERROR,
WARNING,
INFORMATION.
/SO källa Anger vilken källa som ska anges för
händelsen (om inget anges, används
"eventcreate"
som standard). En giltig källa kan
vara valfri
sträng men bör motsvara det program
eller den
komponent som orsakar händelsen.
/ID id Anger ID för händelsen. Giltiga ID-
nummer
för egna meddelanden är i intervallet
1 - 1000.
/D beskrivning Anger en beskrivning för händelsen.
/? Visar detta syntaxmeddelande.
Exempel:
EVENTCREATE /T ERROR /ID 1000
/L APPLICATION /D "Min egna händelse i programloggen"
EVENTCREATE /T ERROR /ID 999 /L APPLICATION
/SO WinWord /D "Winword-händelse 999 inträffade pga lågt
diskutrymme"
EVENTCREATE /S system /T ERROR /ID 100
/L APPLICATION /D "Ett eget jobb installerades inte"
EVENTCREATE /S server /U användare /P lösenord /ID 1 /T ERROR
/L APPLICATION /D "Användaren nekas åtkomst pga felaktiga
autentiseringsuppgifter"
C:\WINDOWS>EVENTTRIGGERS /?
C:\WINDOWS>eventtriggers /?
EVENTTRIGGERS /parameter
[arguments
]Description:
This command-line tool enables an administrator to display and
configure "Event Triggers" on local or remote system.
Parameter List:
/Create Create a new Event Trigger that will monitor and act
upon the occurrence of NT Log Events of given criteria.
/Delete Deletes an Event Trigger by its trigger ID.
/Query Displays the Event Trigger properties and settings.
/? Displays this help/usage.
Examples:
EVENTTRIGGERS /Create /?
EVENTTRIGGERS /Delete /?
EVENTTRIGGERS /Query /?
C:\WINDOWS>EVENTTRIGGERS /CREATE /?
EVENTTRIGGERS /Create
[/S system
[/U username
[/P
[password
]]]] /TR triggername /TK taskname
[/D description
] [/L log
] [/RU username
[/RP
password
]]Description:
Create a new Event Trigger that will monitor and act upon the
occurrence of NT Log Events of a given criteria.
NOTE: Using /EID, /T and /SO together act as a series of AND's.
Parameter List:
/S system Specifies the remote system to connect to.
/U
[domain\
]user Specifies the user context under which the
command should execute.
/P
[password
] Specifies the password for the given user
context. Prompts for input if omitted.
/TR triggername Specifies a friendly name to associate with
the Event Trigger.
/L log Specifies the NT Event Log(s) to monitor
events from. Valid types include:
Application, System, Security, DNS Server
Log and Directory Log. The wildcard "*"
may be used and the default value is "*".
/EID id Specifies a specific Event ID the Event
Trigger should monitor for.
/T type Specifies an Event Type that the trigger
should monitor for. Valid values include:
"ERROR", "INFORMATION", "WARNING",
"SUCCESSAUDIT" and "FAILUREAUDIT".
/SO source Specifies a specific Event Source the Event
Trigger should monitor for.
/D description Specifies the description of the Event
Trigger.
/TK taskname Specifies the task to execute when the
Event Trigger conditions are met.
/RU username Specifies the user account (user context)
under which the task runs. For the system
account value must be "".
/RP password Specifies the password for the user.
To prompt for the password, the value
must be either "*" or none.
Password will not effect for the "SYSTEM"
account.
/? Displays this help/usage.
Examples:
EVENTTRIGGERS /Create /?
EVENTTRIGGERS /Create /TR "Disk Cleanup" /L SYSTEM /T ERROR
/TK c:\windows\system32\cleanmgr.exe
EVENTTRIGGERS /Create /S system /U user /TR "Low Disk Space"
/EID 4133 /T WARNING
/TK \\srv\share\dsk.cmd
EVENTTRIGGERS /Create /S system /U domain\user /P password
/TR "Disk Backup" /EID 4133 /L SYSTEM
/T ERROR /TK \\system\share\ntbackup.exe
EVENTTRIGGERS /Create /RU user /RP password /TR "Disk Backup"
/TK \\system\share\ntbackup.exe /EID 4