Eventcreate



ʹԱָ¼־дԶ¼


﷨



eventcreate [/s Computer [/u Domain\User [/p Password]] {[/l {APPLICATION|SYSTEM}]|[/so SrcName]} /t {ERROR|WARNING|INFORMATION|SUCCESSAUDIT|FAILUREAUDIT} /id EventID /d Description






/s Computer
ָԶ̼ƻ IP ַʹ÷бܣĬֵǱؼ

/u Domain\User
о User  Domain\User ָûʻȨ޵Ĭֵǵǰ¼ļûȨޡ

/p Password
ָûʻ룬ûʻ /u ָ

/l {APPLICATION|SYSTEM}
ָ¼¼־ơЧ־Ϊ APPLICATION  SYSTEM

/so SrcName
ָҪʹõ¼ԴЧԴκַӦ¼Ӧó

/t {ERROR|WARNING|INFORMATION|SUCCESSAUDIT|FAILUREAUDIT}
ָҪ¼͡ЧͰ ERRORWARNINGINFORMATIONSUCCESSAUDIT  FAILUREAUDIT

/id EventID
ָ¼¼ IDЧ ID Ǵ 1  65535 ֡

/d Description
ָ½¼˵

/?ʾʾ




ע


Զ¼дȫ־С






ķʾʹ eventcreate 

eventcreate /t error /id 100 /l application /d "Create event in application log"
 eventcreate /t information /id 1000 /so winmgmt /d "Create event in WinMgmt source"
 eventcreate /t error /id 2001 /so winword /l application /d "new src Winword in application log"
 eventcreate /s server /t error /id 100 /l application /d "Remote machine without user credentials"
 eventcreate /s server /u user /p password /id 100 /t error /l application /d "Remote machine with user credentials"
 eventcreate /s server1 /s server2 /u user /p password /id 100 /t error /so winmgmt /d "Creating events on Multiple remote machines"
 eventcreate /s server /u user /id 100 /t warning /so winmgmt /d "Remote machine with partial user credentials"

XOX



