Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to test some Splunk-y things with my Windows logs. But I want to be sure of the logs that are coming in so I can be sure I'm keeping and discarding logs properly. What I'm really looking for is something like the Windows (7, if possible) equivalent of 'logger' on unix/linux.

I found EventCreate, but as far as I can tell, I'd need to change some of my Splunk configs to use that data.

Does such a thing exist?


I should include that my hope is to write to the system and/or security logs. I realize that being able to do that presents some risks, but I'm hoping it's possible.

share|improve this question
up vote 2 down vote accepted

Well, not sure why EventCreate won't work for you. That will write to the System log. You could use PowerShell, which is pretty much the new answer for doing anything.

Stolen from

$evt = new-object System.Diagnostics.EventLog("Application")
$evt.Source = "MyEvent"
$infoevent = [System.Diagnostics.EventLogEntryType]::Information
$evt.WriteEntry("My Test Event",$infoevent,70)
share|improve this answer

Hey Powershell can write events to an event log.

Commandlet "Write-EventLog"

share|improve this answer

Not sure what you need initially, but there is a windows logging mechanism. If what you really want to do is to send windows logs to a centralized server, look at snare open source project or lasso at

share|improve this answer
No, I've got the transmission covered. What I'm looking for is a mechanism to fabricate logs for testing purposes. So I could (for example) create a log with eventcode=681 and send it to the EventLog. Then when the splunk client sends it off I can ascertain the processing of the log. – thepocketwade Oct 22 '10 at 13:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.