![]() If you want to restrict searches to only include a certain event level, you can query for them using their level number. Wevtutil qe "C:\Directory\SubDirectory\logFile.evt" /lf:true | findstr /C:"license found" evt log file, you can find the text “license found” using: Once you have determined which log you would like to query, type something such as: If you want to specify the level of the event, such as “Information,” you can include:Ĭscript eventquery.vbs /L Application /V /FI "Type eq Information"| findstr /C:"Performance counters for the WmiApRpl" For instance, if you want to find the string “Performance counters for the WmiApRpl” in the output of the Application log, you can use:Ĭscript eventquery.vbs /L Application /V | findstr /C:"Performance counters for the WmiApRpl" This can be done by piping the output of the query to the findstr command which will be able to pattern match the output. You can further refine your search by including a search pattern. For example, if you are using the Application log, you can use the Application argument. Then, you can specify which log you are trying to work with. Open the command line and browse to the directory containing the eventquery.vbs script:
0 Comments
Leave a Reply. |