PsLogList 2.62
The Resource Kit comes with a program, elogdump, which allows you to dump the contents of an Event Log on the local or a remote computer.
|
The Resource Kit comes with a program, elogdump, which allows you to dump the contents of an Event Log on the local or a remote computer. PsLogList is a clone of elogdump except that PsLogList lets you login to remote systems in situations your current set of security credentials would not permit access to the Event Log, and PsLogList retrieves message strings from the computer on which the event log you view resides.
The default behavior of PsLogList is to show the contents of the System Event Log on the local computer, with visually-friendly formatting of Event Log records. Command line options let you view logs on different computers, use a different account to view a log, or to have the output formatted in a string-search friendly way.
usage: psloglist [-?] [\\computer[,computer[,...] | @file [-u username [-p password]]] [-s [-t delimiter]] [-m #|-n #|-h #|-d #|-w][-c][-x][-r][-a mm/dd/yy][-b mm/dd/yy][-f filter] [-i ID[,ID[,...] | -e ID[,ID[,...]]] [-o event source[,event source][,..]]] [-q event source[,event source][,..]]] [-l event log file]
@file
Execute the command on each of the computers listed in the file.
-a
Dump records timestamped after specified date.
-b
Dump records timestamped before specified date.
-c
Clear the event log after displaying.
-d
Only display records from previous n days.
-e
Exclude events with the specified ID or IDs (up to 10).
-f
Filter event types with filter string (e.g. "-f w" to filter warnings).
-h
Only display records from previous n hours.
-i
Show only events with the specified ID or IDs (up to 10).
-l
Dump records from the specified event log file.
-m
Only display records from previous n minutes.
-n
Only display the number of most recent entries specified.
-o
Show only records from the specified event source (e.g. \"-o cdrom\").
-p
Specifies optional password for user name. If you omit this you will be prompted to enter a hidden password.
-q
Omit records from the specified event source or sources (e.g. \"-q cdrom\").
-r
Dump log from least recent to most recent.
-s
This switch has PsLogList print Event Log records one-per-line, with comma delimited fields. This format is convenient for text searches, e.g. psloglist | findstr /i text, and for importing the output into a spreadsheet.
-t
The default delimeter is a comma, but can be overriden with the specified character.
-u
Specifies optional user name for login to remote computer.
-w
Wait for new events, dumping them as they generate (local system only).
-x
Dump extended data.
eventlog
By default PsLogList shows the contents of the System Event Log. Specify a different event log by typing in the first few letters of the log name, application, system, or security.
Like Win NT/2K's built-in Event Viewer and the Resource Kit's elogdump, PsLogList uses the Event Log API, which is documented in Windows Platform SDK. PsLogList loads message source modules on the system where the event log being viewed resides so that it correctly displays event log messages.
tags event log event source the specified records from the event from the only display with the from previous display records the system specified event dump records
Download PsLogList 2.62
Authors software
Bluescreen 3.2
Mark Russinovich
One of the most feared colors in the NT world is blue.
Du v 1.00 r 7
Mark Russinovich
Du (disk usage) will report the disk space usage for the directory you specify.
Sigcheck 1.0
Mark Russinovich
Verify that images are digitally signed and dump version information with this simple command-line utility called Sigcheck.
AccessChk 1.03
Mark Russinovich
As a part of ensuring that they've created a secure environment Windows administrators often need to know what kind of accesses specific users or groups have to resources including files, directories, Registry keys, and Windows services.
CacheSet 1.0
Mark Russinovich
CacheSet is an applet which helps you manipulate the working-set parameters of the system file cache.
Similar software
PsLogList 2.62
Mark Russinovich
The Resource Kit comes with a program, elogdump, which allows you to dump the contents of an Event Log on the local or a remote computer.
Event Catcher 1.0.0.24
Eric Fetty
Event Catcher is a task-tray utility that will monitor local or remote windows boxes for new entries in their event log.
Event Engineer 1.0
Cyntrigal
Event Engineer lets you to quickly gather and organize your event logs from all of your connected servers.
Event Manager 2.1.0.247
RoteBetaSoftware
Event Manager is a useful program that helps you to remember your appointments.
Event 'Minder 1.1
Chris Stromberger
Event 'Minder is a small reminder program that will help you remember birthdays, anniversaries, etc.
Kevin's Datebook 1.10 Beta
Kevin
Kevin's Datebook will help you keep track of birthdays, anniversaries, holidays, appointments or any event you want to keep track of.
CyberMatrix Reminder 1.00
CyberMatrix Corporation Inc
CyberMatrix Reminder is a freeware event reminder and event scheduler .
Snare for Windows 2.6.4
InterSect Alliance
Snare for Windows is a Windows NT, Windows 2, Windows XP, and Windows 2003 compatible service designed to interact with the underlying Windows Eventlog subsystem to facilitate remote, real-time transfer of event log information.
Scadenze Light 6.0.1.0
Romano Signorelli
Stop with forgotten birthdays! With Scadenze Light you can insert events and let your computer remember you when the event occurs, many days before (so you have the time to buy a gift.
Event Monitor 1.0
Oliver Schneider
Event Monitor is a very small, very simple helper for the NT system administrators.
Other software in this category
Nullsoft Beep 0.3
Nullsoft, Inc
Nullsoft Beep is an application that makes your computer sound like computers sound in the movies.
AR Soft RAM Disk 1.20
AR Soft
The AR RAM Disk is a freeware driver for Windows NT or Windows 2000.
DBX Plugin for Windows Commander Beta
Labs99
DBX Plugin is an additional component for Windows Commander allowing you to read contents of Microsoft Outlook Express files.
4th split 1.1.9.0
Sergey S. Tkachenko
4th split is used for splitting impossibly large files on blocks.
HDCopy 2.104
Kurt Zimmermann
HDCopy is recommended to make a boot disk.