locked
How to read event logs of a windows 2012 server RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I ran the following command from another machine in the same domain.

    Get-EventLog -LogName "Application" -ComputName "Server01"

    I tried using the following command: But it says "Cannot open log Application on machine Server01. Windows has not provided an error code.

    I want to dump entire logs under "Application" into  some file.

    Any suggestions please

    thank you

    Thursday, June 21, 2018 7:50 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Get-WinEvent -FilterHashTable @{Logname='Application'} -Computername server01

    \_(ツ)_/

    Thursday, June 21, 2018 8:07 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    To export the complete log to a file this is much faster and more usable.

    wevtutil epl application applog.evtx

    wevtutil /?

    \_(ツ)_/

    Thursday, June 21, 2018 8:14 PM