You might wonder about this change, until you
begin looking at the Server Core event log setup, which is very complex. (The new event logs are
a significant change from past versions of Windows that have contained the same few logs.) The
WEvtUtil utility has the flexibility required to work with Server Core??™s complex event log setup.
This utility uses the following syntax:
WEvtUtil COMMAND [ARGUMENT [ARGUMENT] ...] [/OPTION:VALUE [/OPTION:VALUE] ...]
It helps to discuss WEvtUtil command line arguments as commands and common options (with
associated arguments). The following list describes each of the commands (the short name appears
first, followed by the long name in parentheses).
el (enum-logs) Displays a list of all of the logs on the system.
gl (get-log) Logname Obtains configuration information about a specific log. You must
provide the fully qualified name of the log that you want to work with. For example, if you want
to know about the Backup log, you must provide the fully qualified name of Microsoft-
Windows-Backup. Use the el command to obtain a list of fully qualified names.
RECORDING SYSTEM STATUS INFORMATION 451
sl (set-log) Logname [/Option:Value [/Option:Value] .
Pages:
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069