Create a custom event with powershell

Julian Rasmussen

To create an event without eventcreate.exe, which is limited to EventID below 1000, you can use powershell. { } indicates what you have to customize and then just run everything as admin from powershell.

$evt=new-object System.Diagnostics.Eventlog(“{Application/System/etc..}”)

$evt.Source=”{SOURCE}”

$evtNumber={EVENT ID}

$evtDescription=”{write a description}”

$infoevent=[System.Diagnostics.EventLogEntryType]::{Warning/Error/etc..}

$evt.WriteEntry($evtDescription,$infoevent,$evtNumber)

Related Posts