Show-EventLog
Displays the event logs of the local or a remote computer in Event Viewer.
Syntax
Default (Default)
Show-EventLog
[[-ComputerName] <String>]
[<CommonParameters>]
Description
The Show-EventLog cmdlet opens Event Viewer on the local computer and displays in it all of the
classic event logs on the local computer or a remote computer.
The cmdlets that contain the EventLog noun work only on classic event logs. To get events from
logs that use the Windows Event Log technology, use the Get-WinEvent cmdlet.
Examples
Example 1: Display event logs for the local computer
Show-EventLog
This command opens Event Viewer and displays in it the classic event logs on the local computer.
Example 2: Display event logs for a remote computer
Show-EventLog -ComputerName "Server01"
This command opens Event Viewer and displays in it the classic event logs on the Server01 computer.
Parameters
-ComputerName
Specifies a remote computer. Show-EventLog displays the event logs from the specified computer in
Event Viewer on the local computer. The default is the local computer. When you use this parameter,
the command runs eventvwr.exe and passes the value of this parameter.
Important
Using this parameter with untrusted data is a security risk. Only use trusted data with this parameter. For more information, see Validate All Inputs.
Parameter properties
| Type: | String |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | CN |
Parameter sets
(All)
| Position: | 0 |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Inputs
None
You can't pipe input to this cmdlet.
Outputs
None
This cmdlet doesn't generate any output.
Notes
The Windows PowerShell command prompt returns as soon as Event Viewer opens. You can work in the current session while Event Viewer is open.
Because this cmdlet requires a user interface, it doesn't work on Server Core installations of Windows Server.
