The Enterprise Cloud

Create event log entries in Windows Server 2003

Takeaway: When performing automated tasks on remote systems, recording the automated tasks to the event logs can help you or other administrators understand what actions you performed and how the system responded. You may find log entries especially useful for recording other events to the log by using the Windows Server 2003’s command line utility. Derek Schauland shows how you can issue this utility within a batch file to record the actions of the batch file or call upon it during an installation to an event log.

Windows Server 2003 logs many types of events for all sorts of events, including applications, system events, and security items. These event logs are helpful in tracking down performance issues and problems with the operating system or applications running on the server. You may find log entries especially useful for recording other events to the log by using the Windows Server 2003’s command line utility. You can issue this utility within a batch file to record the actions of the batch file or call upon it during an installation to an event log.

The Event Create command for creating an event log entry is EventCreate. Executing the EventCreate command with the /? argument provides the commands shown in the table below.

C:> eventcreate /S \\servername /L Application /T Success /SO Application Name /ID 1754 /D “Description of event”

You can record any event to the logs with this command. Windows Server 2003 adds many events to the logs without user intervention, but any custom scripts you create to assist you in performing any tasks may not remain recorded on your system unless you record them.

Argument Action
/S Specify the name of the remote system to connect to when recording the event
/U Specify a username to record the event as necessary
/P Specify a password for the given username; Prompts for input when a password is not specified.
/L Specify the log to record the event (e.g., Application, System, Security)
/T Specify the type of event; valid types include SUCCESS, ERROR, WARNING, INFORMATION
/SO Specify the source of the event (e.g., WinWord for Microsoft Word)
/ID Specify an ID for the event between 1 and 1000 (no commas accepted)
/D Specifies the description of the event to be entered; it requires surrounding quotation marks

When performing automated tasks on remote systems, recording the automated tasks to the event logs can help you or other administrators understand what actions you performed and how the system responded.

Note: The EventCreate command also works on Windows XP and Vista systems.

Miss a Windows Server 2003 tip?

Check out the Windows Server 2003 archive, and catch up on the most useful tips from this newsletter.

Stay on top of the latest Windows Server 2003 tips and tricks with our free Windows Server newsletter, delivered each Wednesday. Automatically sign up today!

Get IT Tips, news, and reviews delivered directly to your inbox by subscribing to TechRepublic’s free newsletters.

Derek Schauland

About Derek Schauland

Derek Schauland is a Microsoft MVP working on MCITP certifications for Windows Server 2008 who loves helping other people with technology.

Derek Schauland

Derek Schauland
Derek Schauland is a Microsoft MVP working on MCITP certifications for Windows Server 2008 who loves helping other people with technology. Beginning with technology in 1997 he has worked with many flavors of Windows (95/NT â€" 7/2008 R2) and most recently has picked up a Mac just to get to know it a bit better.

Derek Schauland

Derek Schauland
Microsoft MVP (2008 â€" 2010); Personal blog sponsored by Quest Software
6
Comments

Join the conversation!

Follow via:
RSS
Email Alert