automation

EventViewerX

Windows Event Log tooling for PowerShell and .NET: typed queries, reporting, export, WEC, automation, and the PSEventViewer module.
732 stars69 forksC#Updated 10/11/2026100% free · open source
What it does

Provides PowerShell and .NET commands to query, filter, report on, and export Windows Event Logs with typed objects and a graphical viewer.

When to use it
  • •You need to pull specific error events from Application or System logs for a nightly health‑check script.
  • •You want to export filtered security events (e.g., failed logins) to CSV/Excel for compliance reporting.
  • •You require a programmable way to subscribe to Windows Event Collector (WEC) streams in a C# service.
Ready-to-paste prompt
Get all failed RDP login attempts from the Security log in the last 24 hours and export them to CSV:
```powershell
Import-Module EventViewerX
$filter = "*[System[(EventID=4625) and TimeCreated[timediff(@SystemTime) <= 86400000]]]"
$q = New-EventLogQuery -LogName "Security" -XPath $filter
$events = Invoke-EventLogQuery $q
$events | Select-Object TimeCreated, @{Name='User';Expression={$_.Properties[5].Value}}, @{Name='IP';Expression={$_.Properties[18].Value}} |
    Export-EventLog -Path "C:\Reports\FailedRDPLogins.csv"
```
Heads up: The module requires PowerShell 5.1 or newer **and** the .NET Framework 4.7.2 (or .NET Core 3.1+ for the library); on Windows Server Core you must install the `Microsoft.Windows.EventLog` feature first.
Saves to your device
Use with Claude
New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install
Claude Code
mkdir -p ~/.claude/skills/eventviewerx && curl -fsSL https://workflowstacks.com/api/skills/eventviewerx/claude-skill -o ~/.claude/skills/eventviewerx/SKILL.md
Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)
claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions
Details
Creator
EvotecIT
Language
C#
Category
automation
Published
5/12/2018

Are you the creator of this tool? and earn 85% of every sale.

Show it off in your README:

Featured on WorkflowStacks
[![Featured on WorkflowStacks](https://workflowstacks.com/api/badge/eventviewerx.svg)](https://workflowstacks.com/skills/eventviewerx?utm_source=github&utm_medium=badge)
🔥 Hot this week, in your inbox
Skills like this, every Monday.

The five fastest-growing open-source AI skills, ranked by GitHub star growth. One email a week, unsubscribe anytime.