问题
What is the command to open windows event viewer displaying a particular node details?
For example if I simply use eventvwr
command; it opens the UI with Root Node selected. I want Application
node selected when it is opened OR any other node.
Can it be configured programatically?
Thanks.
回答1:
To view the eventvwr.exe arguments simply type:
eventvwr /?
To specifically open the Application log use the command below:
eventvwr computername /l:"%SystemRoot%\System32\Winevt\Logs\Application.evtx"
回答2:
For an Application node you'd call it as such:
eventvwr /c:Application
回答3:
I don't think you can. Your best option is to create a custom view - to filter the events from some specific apps if thats what you want. For command line, 'eventvwr /f' can be used to specify filter.
来源:https://stackoverflow.com/questions/7010397/open-event-viewer-from-a-certain-node