C:\WINDOWS>EVENTCREATE /?
EVENTCREATE
[/S sistem
[/U kullanici adi
[/P
[parola
]]]] /ID
eventid
[/L günlükadi
] [/SO kaynakadi
] /T türü /D açiklama
Açiklama:
Bu komut satiri araci yöneticinin özel bir olay kimligi ve
iletisini belitilen günlükte olusturmasina olanak saglar.
Parametre Listesi:
/S sistem Baglanilacak uzak sistemi belirtir.
/U
[etkialani\
]kullanici Komutun çalistirilacagi
kullanici baglamini belirtir.
/P
[parola
] Belirtilen kullanici baglaminin
parolasini
belirtir. Atlanirsa giris yapilmasi
istenir.
/L günlükadi Olusturulacak olay ve türünü
belirler.
/T tür Olusturulacak olayin türünü belirler.
Geçerli türler: SUCCESS, ERROR,
WARNING, INFORMATION.
/SO kaynak Olay için kullanilacak kaynagi
belirler
(belirtilmezse, kaynak varsayilan
olarak
'eventcreate' olur). Geçerli kaynak
herhangi
bir dize olabilir ve olayi olusturan
uygulama veya
bileseni olayda temsil etmelidir.
/ID kimlik Olayin Olay kimligini belirtir.
Geçerli
özel ileti kimligi 1-1000
arasindadir.
/D açiklama Yeni olayin açiklama metnini belirtir.
/? Bu yardim iletisini görüntüler.
Örnekler:
EVENTCREATE /T ERROR /ID 1000
/L APPLICATION /D "Uygulama günlügü için özel hata
olayim"
EVENTCREATE /T ERROR /ID 999 /L APPLICATION
/SO WinWord /D "Winword 999 olayi yetersiz disk yeri
yüzünden olustu"
EVENTCREATE /S sistem /T HATA /ID 100
/L APPLICATION /D "Özel is yüklenemedi"
EVENTCREATE /S sistem /U kullanici /P parola /ID 1 /T ERROR
/L APPLICATION /D "Geçersiz kullanici kimlik bilgileri
yüzünden
kullanici erisimi gerçeklesemedi"
C:\WINDOWS>EVENTTRIGGERS /?
EVENTTRIGGERS /parameter
[arguments
]Description:
This command-line tool enables an administrator to display and
configure "Event Triggers" on local or remote system.
Parameter List:
/Create Create a new Event Trigger that will monitor and act
upon the occurrence of NT Log Events of given criteria.
/Delete Deletes an Event Trigger by its trigger ID.
/Query Displays the Event Trigger properties and settings.
/? Displays this help/usage.
Examples:
EVENTTRIGGERS /Create /?
EVENTTRIGGERS /Delete /?
EVENTTRIGGERS /Query /?
C:\WINDOWS>EVENTTRIGGERS /CREATE /?
EVENTTRIGGERS /Create
[/S system
[/U username
[/P
[password
]]]] /TR triggername /TK taskname
[/D description
] [/L log
] [/RU username
[/RP
password
]]Description:
Create a new Event Trigger that will monitor and act upon the
occurrence of NT Log Events of a given criteria.
NOTE: Using /EID, /T and /SO together act as a series of AND's.
Parameter List:
/S system Specifies the remote system to connect to.
/U
[domain\
]user Specifies the user context under which the
command should execute.
/P
[password
] Specifies the password for the given user
context. Prompts for input if omitted.
/TR triggername Specifies a friendly name to associate with
the Event Trigger.
/L log Specifies the NT Event Log(s) to monitor
events from. Valid types include:
Application, System, Security, DNS Server
Log and Directory Log. The wildcard "*"
may be used and the default value is "*".
/EID id Specifies a specific Event ID the Event
Trigger should monitor for.
/T type Specifies an Event Type that the trigger
should monitor for. Valid values include:
"ERROR", "INFORMATION", "WARNING",
"SUCCESSAUDIT" and "FAILUREAUDIT".
/SO source Specifies a specific Event Source the Event
Trigger should monitor for.
/D description Specifies the description of the Event
Trigger.
/TK taskname Specifies the task to execute when the
Event Trigger conditions are met.
/RU username Specifies the user account (user context)
under which the task runs. For the system
account value must be "".
/RP password Specifies the password for the user.
To prompt for the password, the value
must be either "*" or none.
Password will not effect for the "SYSTEM"
account.
/? Displays this help/usage.
Examples:
EVENTTRIGGERS /Create /?
EVENTTRIGGERS /Create /TR "Disk Cleanup" /L SYSTEM /T ERROR
/TK c:\windows\system32\cleanmgr.exe
EVENTTRIGGERS /Create /S system /U user /TR "Low Disk Space"
/EID 4133 /T WARNING
/TK \\srv\share\dsk.cmd
EVENTTRIGGERS /Create /S system /U domain\user /P password
/TR "Disk Backup" /EID 4133 /L SYSTEM
/T ERROR /TK \\system\share\ntbackup.exe
EVENTTRIGGERS /Create /RU user /RP password /TR "Disk Backup"
/TK \\system\share\ntbackup.exe /EID 4
