User Tools

Site Tools


windows:windows_events

Dump Windows events into files

You can use the Data Protection for Exchange console to list the events that originate by Data Protection for Exchange.

Select Dashboard - ServerName > Diagnostics > System Information and double-click the **dpevents.ps1** script in the

On Windows Server 2008 and later, You can use PowerShell scripting to list the events information. You can also use the export function from within the Event Viewer to do this function. The utility, by default, produces a tabular listing of all event log records in three sections (one section per event log type). Specify the type of event log you require by using one of the following /L parameters:

/L Application
/L/LSecurity
/L System

The following example generates output only for the application and system event logs:

cscript c:\windows\system32\eventquery.vbs /L Application >eq_app.out
cscript c:\windows\system32\eventquery.vbs /L System >eq_sys.out

You can use the /V parameter to receive detailed (verbose) output:

cscript c:\windows\system32\eventquery.vbs /V >eq.out
cscript c:\windows\system32\eventquery.vbs /L System /V >eq_sys.out

You can use the /FO parameter to specify tabular, list, or comma-separated (CSV) output. The following are the different methods of specifying the output:

/FO TABLE
/FO LIST
/FO CSV

The default format is TABLE.

The following example generates a detailed CSV file of the application log:

cscript c:\windows\system32\eventquery.vbs /L Application /FO CSV /V >eq_app.out

You can get more help information for the tool by using the following example:

cscript c:\windows\system32\eventquery.vbs /?

To increase the number of events that are logged by the Microsoft Exchange Writer, use the Set-EventLogLevel PowerShell cmdlet command.

windows/windows_events.txt · Last modified: 2021/01/01 21:25 (external edit)