wevtail

wevtail 0.1.1

tail -f for Windows event logs.

  • By Ldogg123
  • Open Source
Download for Windows

About wevtail

wevtail follows Windows event log channels live (push-based, no polling) through the Win32 EvtSubscribe API — like tail -f, but for the event log. It supports following multiple channels at once, colorized or JSON-lines output, XPath filtering, .evtx file replay, and remote-host tailing.

Technical details

PublisherLdogg123
Version0.1.1
LicenseMIT OR Apache-2.0
Installer typemsi
Architecturex64
Package IDLdogg123.wevtail
Install scopeAll users

Install wevtail from the command line

Install with Windows Package Manager
winget install --id=Ldogg123.wevtail -e
Update to the latest version
winget upgrade --id=Ldogg123.wevtail -e
Uninstall
winget uninstall --id=Ldogg123.wevtail -e
Silent install with the offline installer
msiexec /i "wevtail-0.1.1-x86_64.msi" /quiet /norestart
Uninstall the MSI package
msiexec /x {B8E61C6E-C230-4336-A85D-D86AA41154C5} /quiet

clievent-logeventlogevtxloggingsysadmintailwindows

Frequently asked questions

Is wevtail free?

Yes. wevtail is free and open-source software released under the MIT OR Apache-2.0 license.

What is the latest version of wevtail?

The latest version is 0.1.1.

Is it safe to download wevtail?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with ce9d9fa2fd78b8feb56b1029218c0c5f04e2ecf83489eac9e41f33b1b6886c81.

Which Windows versions does wevtail support?

wevtail runs on Windows and is available for 64-bit (x64) systems.

How do I install wevtail silently?

Run the offline installer with msiexec /i "wevtail-0.1.1-x86_64.msi" /quiet /norestart, or install it with Windows Package Manager: winget install --id=Ldogg123.wevtail -e --silent.

How do I uninstall wevtail?

Open Settings › Apps › Installed apps, find wevtail and select Uninstall. From the command line, run winget uninstall --id=Ldogg123.wevtail -e.