Open event viewer from a certain node

问题:

What is the command to open windows event viewer displaying a particular node details?

For example if I simply use eventvwr command; it opens the UI with Root Node selected. I want Application node selected when it is opened OR any other node.

Can it be configured programatically?

Thanks.

回答1:

To view the eventvwr.exe arguments simply type:

eventvwr /?

To specifically open the Application log use the command below:

eventvwr computername /l:"%SystemRoot%\System32\Winevt\Logs\Application.evtx"

回答2:

For an Application node you'd call it as such:

eventvwr /c:Application

回答3:

I don't think you can. Your best option is to create a custom view - to filter the events from some specific apps if thats what you want. For command line, 'eventvwr /f' can be used to specify filter.