Forrest logo
back to the eventcreate tool

eventcreate:tldr:1a724

eventcreate: Create an event with a specific source.
$ eventcreate /so ${source_name} /t ${type} /id ${id} /d "${message}"
try on your machine

The command you provided is used to create a custom event in the Windows Event Viewer. Here is the breakdown of the command:

  • eventcreate: This is the main command used to create a custom event.
  • /so ${source_name}: Specifies the source name for the event. ${source_name} is a placeholder for the actual name you want to assign to the event source.
  • /t ${type}: Specifies the type of event to be created. ${type} is a placeholder for the event type, which can be one of the following values: success, error, warning, information.
  • /id ${id}: Specifies the event ID. ${id} is a placeholder for the actual identification number or code you want to assign to the event.
  • /d "${message}": Specifies the description or message for the event. ${message} is a placeholder for the content of the event message or description. The message should be enclosed in double quotes ("").

Overall, this command allows you to create a custom event with a specific source name, type, ID, and message in the Windows Event Viewer, which is used to monitor and manage system events and logs.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the eventcreate tool