Display the event logs of the local or a remote computer in Event Viewer.
Syntax Show-EventLog [[-ComputerName] string] [CommonParameters] Key: -ComputerName string Specify a remote computer. The default is the local computer. Type the NetBIOS name, an Internet Protocol (IP) address, or a fully qualified domain name of a remote computer. This parameter does not rely on PowerShell remoting. CommonParameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -WarningAction, -WarningVariable, -OutBuffer -OutVariable.
Remove-EventLog will delete an event log file and unregister all of its event sources for the log. This cmdlet can also be used to unregister event sources without deleting any event logs.
The EventLog cmdlets work only on classic event logs. To get events from logs that use the Windows Event Log technology in Windows Vista and later versions of Windows, use Get-WinEvent.
Open Event Viewer and display the classic event logs from the local computer:
PS C:\> show-eventlog
Open Event Viewer and display the classic event logs from server64 :
PS C:\> show-eventlog -computername Server64
“Don't tell me where your priorities are. Show me where you spend your money and I'll tell you what they are” ~ James W. Frick
Get-Eventlog - Get event log data
New-Eventlog - Create a new event log and a new event source
© Copyright SS64.com 1999-2013
Some rights reserved