From 25c4b4053cdfe32a34004a1c75f777d77ee233a2 Mon Sep 17 00:00:00 2001 From: Sean McArdle Date: Mon, 17 Jul 2017 17:01:24 -0700 Subject: [PATCH] Added readme. --- readme.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 readme.md diff --git a/readme.md b/readme.md new file mode 100644 index 0000000..c6060b1 --- /dev/null +++ b/readme.md @@ -0,0 +1,16 @@ +# EventPump +### Because I couldn't think of a better name. +A simple command line application that will monitor Windows Event Logs +and write JSON serialized event entries to stdout. These can be reassembled +by other programs such as PowerShell eg: `.\EventPump.exe -log Application -log Security | % { $_ | ConvertFrom-Json | FL }` + +Usage: EventPump.exe -log Application -id 63,25 +the -id option may contain multiple values separated by +commas but no whitespace. + + + -v Verbosely print internal events. + --log=VALUE Specify log to collect from, may be used multiple + times. + --id=VALUE Comma separated list of event IDs to filter on + -h, -?, --help Show this help. \ No newline at end of file