How to create Windows EventLog source from command

Question

I'm creating an ASP.NET application that will log some stuff to Windows EventLog. To do this an event source has to be created first. This requires administrative priviledges so I cannot do it in the ASP.NET app.

Is there an existing command-line application that is bundled with Windows that can create an event log source, or must I roll out my own?

Answer 1

Try PowerShell 2.0's EventLog cmdlets

Throwing this in for PowerShell 2.0 and upwards:

• Run New-EventLog once to register the event source:

  New-EventLog -LogName Application -Source MyApp
  

• Then use Write-EventLog to write to the log:

  Write-EventLog 
      -LogName Application 
      -Source MyApp 
      -EntryType Error 
      -Message "Immunity to iocaine powder not detected, dying now" 
      -EventId 1
  

Answer 2

Try "eventcreate.exe"

An example:

eventcreate /ID 1 /L APPLICATION /T INFORMATION  /SO MYEVENTSOURCE /D "My first log"

This will create a new event source named MYEVENTSOURCE under APPLICATION event log as INFORMATION event type.

I think this utility is included only from XP onwards.

Further reading

• Windows IT Pro: JSI Tip 5487. Windows XP includes the EventCreate utility for creating custom events.

• Type eventcreate /? in CMD prompt

• Microsoft TechNet: Windows Command-Line Reference: Eventcreate

• SS64: Windows Command-Line Reference: Eventcreate