Event.exe

Event.exe analyzes a Windows event log by counting the occurrences of
each event. You can analyze the log of a local or remote computer, or
request an analysis of the same log on many computers by submitting a
list of computer names.

EVENT [-e ] [-m | -i ]
[-o ] [-n ] [-s] [-reb]
[-src ] [-type ]
[-date ] [-?]


-e Event log name. Default is System. Names with spaces must be
enclosed in double quotes.

-m Computer name or IP Address (no backslashes). Default is local
computer.

-i Name of input file listing computer names.

-o Path\name of output file.

-n Event ID. Adds the event description to the results.

-s Summarize. Display summary for matching event ID's from
multiple machines.

-src Source name. Display details for the specified source
name only.

-reb Reboot date and time. Display the machine
name and reboot time only.
(Used only with input file.)

-type Event type. Display only events of a specific type.
(i.e. Error, Warning, Information.)

-date Event date. Display only events from a specific date.
Specify month and day values using single digits.
(i.e. 09/01/00 is expressed as 9/1/2000.)

-? Help


Examples:

event (Default: analyzes the system log on the local computer).

event -m Server01 -e Application -n 2010

event -m DCserver2 -e "Directory Service" -o dc.log

event -n 213 -i mc.txt -o d:\eventlogs\misc.log

Notes:

Do not include backslashes (\\) before computer names, either
on the command line or when using an input file.

The input file option lets you analyze the same log on many
computers. Create a text file with one computer name or IP address
on each line. Specify the path and input file name.
(Default is the current directory.)

If the output file contains text, Event.exe appends its
results to the existing text.