Open event viewer from a certain node

Question

What is the command to open windows event viewer displaying a particular node details?

For example if I simply use eventvwr command; it opens the UI with Root Node selected. I want Application node selected when it is opened OR any other node.

Can it be configured programatically?

Thanks.

score 3 · Answer 1 · answered Aug 16 '12 at 16:42

3

To view the eventvwr.exe arguments simply type:

eventvwr /?

To specifically open the Application log use the command below:

eventvwr computername /l:"%SystemRoot%\System32\Winevt\Logs\Application.evtx"

answered Aug 16 '12 at 16:42

Sean

31
2

score 1 · Answer 2 · answered Mar 13 '16 at 00:07

1

For an Application node you'd call it as such:

eventvwr /c:Application

answered Mar 13 '16 at 00:07

c00000fd

20,994
29
177
400

If you are trying to open your custom log try `eventvwr /c:"My New Service Log"`. As an example, If it shows up under `Event Viewer->Applications and Services Logs->My New Service Log`. – Arvo Bowen Jul 13 '16 at 14:25

score 0 · Answer 3 · answered Aug 10 '11 at 12:42

0

I don't think you can. Your best option is to create a custom view - to filter the events from some specific apps if thats what you want. For command line, 'eventvwr /f' can be used to specify filter.

answered Aug 10 '11 at 12:42

user4444

231
2
7

Open event viewer from a certain node

3 Answers3

Linked