none
help ! wevutil scripting question RRS feed

  • Question

  • i need help with wevutil

    i am looking for event id 1000 in the application log

    this is common even id error number so i would like to see only the ones that are level 2 - errors (not informational)

    currently i can only get the following to output the informational.

    is there a switch i am missing to only output error?

    this is what i am using.

    wevtutil.exe qe Application /q:*[System[(EventID=1000)]] /f:text /c:1 /rd:true

    Friday, January 31, 2014 6:46 PM

Answers

All replies

  • WEVUTIL is not a scripting utility.  It is a system utility. Please post question in platform forum for your OS.

    The simple anser is that your XPath query needs to have a filter for the event types you are interested.


    ¯\_(ツ)_/¯

    Friday, January 31, 2014 8:25 PM
  • wevtutil.exe qe Application /q:*[System[(EventID=1000 and Level=2)]] /f:text /c:1 /rd:true

    worked!

    Friday, January 31, 2014 8:46 PM