Skip to content

Latest commit

 

History

History
57 lines (38 loc) · 1.69 KB

README.md

File metadata and controls

57 lines (38 loc) · 1.69 KB
Raw

Windows Event Viewer

This program is viewer for Windows EventLog

Usage

  1. download archive from release page
  2. extract file
  3. execute WEventViewer.exe
  • select "File"-"Open", and input search condition, then eventlog will be loaded
    • if "PathType" = "LogName" is selected, read event log from current machine
    • if "PathType" = "FilePath" is selected, read event log from exported event log file(evtx)
    • raw query's format
  • double click on log, then open detailed log information
  • select log and right-click and select "Copy as XML" in context menu, then EventLog XML will be copied to clipboard

Commandline Options

  • -n/--logname LOGNAME: target LogName or exported windows eventlog file path
  • -t/--logtype LOGTYPE: LogName kind, 'logname': from Windows EventLog store, 'filepath': exported Windows Event Log file(*.evtx)
  • -l/--loglevel LOGLEVEL: LogLevel filter: available values: critical,error,warning,information,verbose
  • -p/--provider PROVIDER: LogProvider filter
  • -b/--begin BEGINDATE: createAt filter begin time
  • -e/--end ENDDATE: createAt filter end time
  • -r/--raw RAW_QUERY: raw filtering query
  • -h/--help: display help window

Screen Shots

MainWindow: MainWindow

OpenLogWindow: OpenLogWindow

ChangeLog

0.4.0

  • open OpenLogWindow at first for convenience
  • log filter can be preset by commandline now

0.3.0

  • add MSI installer to release

0.2.0

  • add eventlog level filter
  • add show providers on OpenLogWindow
  • add show lognames on OpenLogWindow

0.1.0

Initial Release