< Back

Show-EventLog

Tue Jan 29, 2019 10:20 pm

NAME Show-EventLog



SYNOPSIS

Displays the event logs of the local or a remote computer in Event Viewer.





SYNTAX

Show-EventLog [[-ComputerName] <String>] [<CommonParameters>]





DESCRIPTION

The Show-EventLog cmdlet opens Event Viewer on the local computer and displays in it all of the classic event logs on the local computer or a

remote computer.



To open Event Viewer on Windows Vista and later versions of the Windows operating system, the current user must be a member of the Administrators

group on the local computer.



The cmdlets that contain the EventLog noun (the EventLog cmdlets) work only on classic event logs. To get events from logs that use the Windows

Event Log technology in Windows Vista and later versions of the Windows operating system, use the Get-WinEvent cmdlet.





PARAMETERS

-ComputerName <String>

Specifies a remote computer. Show-EventLog displays the event logs from the specified computer in Event Viewer on the local computer. The

default is the local computer.



Type the NetBIOS name, an IP address, or a fully qualified domain name of a remote computer.



This parameter does not rely on Windows PowerShell remoting. You can use the ComputerName parameter even if your computer is not configured to

run remote commands.



Required? false

Position? 0

Default value None

Accept pipeline input? False

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).



INPUTS

None

You cannot pipe input to this cmdlet.





OUTPUTS

None

This cmdlet does not generate any output.





NOTES





* The Windows PowerShell command prompt returns as soon as Event Viewer opens. You can work in the current session while Event Viewer is open.



Because this cmdlet requires a user interface, it does not work on Server Core installations of Windows Server.



*



Example 1: Display event logs for the local computer



PS C:\\>Show-EventLog



This command opens Event Viewer and displays in it the classic event logs on the local computer.

Example 2: Display event logs for a remote computer



PS C:\\>Show-EventLog -ComputerName "Server01"



This command opens Event Viewer and displays in it the classic event logs on the Server01 computer.



RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?LinkId=821636

Clear-EventLog

Get-EventLog

Limit-EventLog

New-EventLog

Remove-EventLog

Write-EventLog