Two Minute Drill: The Eventcreate command

Good morning AskPerf! Blake here to discuss an internal command line tool called Eventcreate. What exactly is Eventcreate? I’m glad you asked. In a nutshell, Eventcreate is a command line tool that enables an administrator to create a custom event ID and message in a specified event log. Let’s check out its options and some examples. When you type “Eventcreate /?” from a command prompt, the following appears:

 

EventCreate

 

Let’s now take a look at some Eventcreate examples:

Create a simple Information event is the System log with an ID of 76:

EventCreate2

 

Create an Error event in the Application log on a remote system with an ID 123:

EventCreate3

 

Create a Warning event in the Security log with an id of 100:

EventCreate4

 

Did you catch the error above? Windows does not allow you to create custom events in the Security log. This is reserved for System level processes.

 

So you might be asking yourself, how can this be useful to me? Well, if you write a lot of automated scripts and wonder if they complete successfully or error out, then this is your tool. Simply modify your script with an Eventcreate command, and you’ll never ask again what happened while your script was running.

 

Additional Resources:

· Eventcreate on TechNet

· How to create custom events

 

-Blake Morrison


Share this post :