Go to file
Sean McArdle 25c4b4053c Added readme. 2017-07-17 17:01:24 -07:00
EventPump Basically works the way I want. 2017-07-17 16:57:14 -07:00
.gitattributes Add .gitignore and .gitattributes. 2017-07-14 13:36:28 -07:00
.gitignore Add .gitignore and .gitattributes. 2017-07-14 13:36:28 -07:00
EventPump.sln Add project files. 2017-07-14 13:36:30 -07:00
readme.md Added readme. 2017-07-17 17:01:24 -07:00

readme.md

EventPump

Because I couldn't think of a better name.

A simple command line application that will monitor Windows Event Logs and write JSON serialized event entries to stdout. These can be reassembled by other programs such as PowerShell eg: .\EventPump.exe -log Application -log Security | % { $_ | ConvertFrom-Json | FL }

Usage: EventPump.exe -log Application -id 63,25 the -id option may contain multiple values separated by commas but no whitespace.

-v Verbosely print internal events. --log=VALUE Specify log to collect from, may be used multiple times. --id=VALUE Comma separated list of event IDs to filter on -h, -?, --help Show this help.