search

kmaki565 / EventLook

A fast & handy alternative to Windows Event Viewer
MIT License
63 stars 12 forks source link

Open Classic Event Logs (.evt) from command line or Explorer #75

Closed XiaoP76 closed 3 weeks ago

XiaoP76 commented 2 months ago

It would be great if it were possible to pass the path to an event file as a parameter on the command line, like this: EventLook.exe "d:!WIP\240906 1744\Diag\EventLogs\Platform-PowerManagement_Operational.evt"

kmaki565 commented 1 month ago

Thanks for the comment. EventLook accepts .evtx file as the first parameter to open the Event Log. See this code. If you wish to open .evt file (instead of .evtx), you could add the extension to the code, but I don't see the need so far.

XiaoP76 commented 1 month ago

Hi K.Maki,

thanks for the answer. You are right, .evtx files can be passed on the command line. But since EventLook works with the older .evt format just fine, why restricting the extension just to .evtx ? I use it as a viewer for .evt files from a legacy system, where they are a part of a diagnosis package.

Best regards

Petr

Am Sa., 14. Sept. 2024 um 14:37 Uhr schrieb K. Maki < @.***>:

Thanks for the comment. EventLook accepts .evtx file as the first parameter to open the Event Log. See this code https://github.com/kmaki565/EventLook/blob/master/EventLook/View/MainWindow.xaml.cs#L66 . If you wish to open .evt file (instead of .evtx), you could add the extension to the code, but I don't see the need so far.

— Reply to this email directly, view it on GitHub https://github.com/kmaki565/EventLook/issues/75#issuecomment-2350976225, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN4XLLWZZQDZNEFWTNCIK53ZWQUY7AVCNFSM6AAAAABN4EJAC6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGNJQHE3TMMRSGU . You are receiving this because you authored the thread.Message ID: @.***>

kmaki565 commented 1 month ago

Hi @XiaoP76, Since I don't have any .evt files (Classic Event Log) in hand, can you test with your files? If all functions in EventLook work well, please open a pull request to add the extension when handling the command line.

XiaoP76 commented 3 weeks ago

Hi @kmaki565, I'm sorry, but it turns out that the .evt files that I have are actually .evtx files with the wrong extension. They simply forgot to change the extension after they switched from Windows XP to Windows 7. I found a bug though - files with uppercase extension .EVTX can't be opened from the command line. I'll fix it with a separate pull request.