Display the event logs of the local or a remote computer in Event Viewer.
Syntax
Show-EventLog [[-ComputerName] string] [CommonParameters]
Key:
-ComputerName string[]
Specify a remote computer. The default is the local computer.
Type the NetBIOS name, an Internet Protocol (IP) address, or a
fully qualified domain name of a remote computer.
This parameter does not rely on PowerShell remoting.
CommonParameters:
-Verbose, -Debug, -ErrorAction, -ErrorVariable, -WarningAction, -WarningVariable,
-OutBuffer -OutVariable.
Remove-EventLog will delete an event log file and unregister all of its event sources for the log. This cmdlet can also be used to unregister event sources without deleting any event logs.
The EventLog cmdlets work only on classic event logs. To get events from logs that use the Windows Event Log technology in Windows Vista and later versions of Windows, use Get-WinEvent.
Examples
Open Event Viewer and display the classic event logs from the local computer:
PS C:\> show-eventlog
Open Event Viewer and display the classic event logs from server64 :
PS C:\> show-eventlog -computername Server64
“Don't tell me where your priorities are. Show me where you spend your money and I'll tell you what they are” ~ James W. Frick
Related PowerShell Cmdlets:
Get-Eventlog - Get event log data.
New-Eventlog - Create a new event log and a new event source.