http://blogs.technet.com/brad_rutkowski/archive/2007/03/24/using-wevtutil-on-longhorn-server-core-servers-to-scan-the-event-logs.aspxIn some cases you might find that you need to scan the event logs locally on a server core machine because you cant access the server remotely for whatever reason. Wevtutil.exe is built into the OS to allow you to do just that. You can use it on regularenCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/brad_rutkowski/archive/2007/03/24/using-wevtutil-on-longhorn-server-core-servers-to-scan-the-event-logs.aspx#1881902Sun, 02 Sep 2007 19:13:34 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:1881902The things that are better left unspoken<p>Windows Server 2008 Server Core doesn't have a graphical event viewer. There is a tool called wevtutil.exe</p> http://blogs.technet.com/brad_rutkowski/archive/2007/03/24/using-wevtutil-on-longhorn-server-core-servers-to-scan-the-event-logs.aspx#2312120Fri, 02 Nov 2007 16:18:27 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:2312120mschroed24<p>What would be the command to pull only the errors from the System log?</p> http://blogs.technet.com/brad_rutkowski/archive/2007/03/24/using-wevtutil-on-longhorn-server-core-servers-to-scan-the-event-logs.aspx#2340943Mon, 05 Nov 2007 21:20:37 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:2340943Brad Rutkowski's Blog<p>I posted on how you can use Wevtutil to enumerate the event logs on server core or LH. Someone left a</p> http://blogs.technet.com/brad_rutkowski/archive/2007/03/24/using-wevtutil-on-longhorn-server-core-servers-to-scan-the-event-logs.aspx#2340947Mon, 05 Nov 2007 21:21:25 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:2340947Brad Rutkowski<p>Good quesiton MSchroed24, see this post now:</p> <p><a rel="nofollow" target="_new" href="http://blogs.technet.com/brad_rutkowski/archive/2007/11/05/returning-just-the-errors-using-wevtutil-exe.aspx">http://blogs.technet.com/brad_rutkowski/archive/2007/11/05/returning-just-the-errors-using-wevtutil-exe.aspx</a></p>