automation

EventViewerX

Windows Event Log tooling for PowerShell and .NET: typed queries, reporting, export, WEC, automation, and the PSEventViewer module.
731 stars71 forksC#Updated 9/7/2026100% free · open source
What it does

Provides PowerShell and .NET commands to query, filter, report on, and export Windows Event Logs with typed objects and a graphical viewer.

When to use it
  • You need to pull specific error events from Application or System logs for a nightly health‑check script.
  • You want to export filtered security events (e.g., failed logins) to CSV/Excel for compliance reporting.
  • You require a programmable way to subscribe to Windows Event Collector (WEC) streams in a C# service.
Ready-to-paste prompt
Get all failed RDP login attempts from the Security log in the last 24 hours and export them to CSV:
```powershell
Import-Module EventViewerX
$filter = "*[System[(EventID=4625) and TimeCreated[timediff(@SystemTime) <= 86400000]]]"
$q = New-EventLogQuery -LogName "Security" -XPath $filter
$events = Invoke-EventLogQuery $q
$events | Select-Object TimeCreated, @{Name='User';Expression={$_.Properties[5].Value}}, @{Name='IP';Expression={$_.Properties[18].Value}} |
    Export-EventLog -Path "C:\Reports\FailedRDPLogins.csv"
```
Heads up: The module requires PowerShell 5.1 or newer **and** the .NET Framework 4.7.2 (or .NET Core 3.1+ for the library); on Windows Server Core you must install the `Microsoft.Windows.EventLog` feature first.
Saves to your device
Use with Claude
New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

🛠️ Technical setup

Expect 20–40 minutes in a terminal — or let your AI agent drive it.

Try it instantly — no install
Claude Code
mkdir -p ~/.claude/skills/eventviewerx && curl -fsSL https://workflowstacks.com/api/skills/eventviewerx/claude-skill -o ~/.claude/skills/eventviewerx/SKILL.md
Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)
claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How EventViewerX works
Codeflow
Free to inspect

EventViewerX is a very large C# project (~159k lines across 893 code files, plus 32 test files). It is a full software project: use it through its install path rather than reading it end to end. Last commit this month, MIT license, has a test suite.

Size
Very large codebase
~159k lines · 893 code files · days to read — use, don't read
Setup
Developer setup
A real software project. Use it via its install path; don't expect to read it all.
Runs on
C#
No API keys detected
C# 93%PowerShell 7%
Where to start reading
  1. 1
    README.md
    Start here — what it does and how to install it
  2. 2
    AGENTS.MD
    The instructions the AI actually follows
  3. 3
    Sources/EventViewerX/ActiveDirectoryFileTimeValueNormalizer.cs
    Inside Sources/EventViewerX/ — the main logic begins here
  4. 4
    Examples/Build-CustomProvider.ps1
    A worked example — copy this to get going
What's in each folder
Sources/EventViewerX/Core code — the actual logic589 files
Docs/Documentation51 files
Examples/Examples you can copy15 files
Benchmarks/Evaluations & benchmarks42 files
READMEHas testsDocumentedCI checksExamples includedMIT licenseUpdated this month
Quick Actions
Details
Creator
EvotecIT
Language
C#
Category
automation
Published
5/12/2018

Are you the creator of this tool? Claim your listing → and earn 85% of every sale.