Chapter 26. Working with Event Subscriptions

This chapter provides information and commands concerning the following topics:

• Enabling the source computer with winrm

• Enabling the collector computer with wecutil

• Adding an account to the Event Log Readers group

• Enabling and testing event subscriptions

• Managing subscriptions with wecutil

• Logging events with eventcreate

Tip

You should be familiar with event subscriptions and their associated commands when preparing for the 70-640 and 70-642 exams.

Enabling the Source Computer with winrm

Event subscriptions are configured so that they travel from a source computer to a collector computer, as shown in Figure 26-1. The events are generated on the source computer(s) and can be viewed on ...

Get Windows Server 2008 Portable Command Guide: MCTS 70-640, 70-642, 70-643, and MCITP 70-646, 70-647 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial