Skip to main content

Enables an administrator to create a custom event in the Windows Event Log.

:: To create an event in the application log:
eventcreate /t ERROR /id 100 /l APPLICATION /d "Create event in application log"

:: To create an event in the WinMgmt source:
eventcreate /t INFORMATION /id 1000 /so winmgmt /d "Create event in WinMgmt source"

:: To create a new event in Winword in the application log:
eventcreate /t ERROR /id 2001 /so winword /l APPLICATION /d "new src Winword in application log"

:: To create a new event on the remote machine using the identity of the current user:
eventcreate /s server /t ERROR /id 100 /l APPLICATION /d "Remote machine without user credentials"

:: To create a new event on the remote machine supplying credentials:
eventcreate /s server /u user /p password /id 100 /t ERROR /l APPLICATION /d "Remote machine with user credentials"

:: To create events on multiple remote machines:
eventcreate /s server1 /s server2 /u user /p password /id 100 /t ERROR /so winmgmt /d "Creating events on Multiple remote machines"

:: To create event an event on a remote machine, supplying a user name only:
eventcreate /s server /u user /id 100 /t WARNING /so winmgmt /d "Remote machine with partial user credentials"