New-Win Event

Module:
Microsoft.PowerShell.Diagnostics
Creates an ETW event for the specified event provider.

Syntax 

New-WinEvent
   [-ProviderName] <String>
   [-Id] <Int32>
   [-Version <Byte>]
   [[-Payload] <Object[]>]
   [<CommonParameters>]

Description

The New-WinEvent cmdlet creates an Event Tracing for Windows (ETW) event for an event provider. You can use this cmdlet to add events to ETW channels from Windows PowerShell.

Examples

Example 1: Create an ETW event for a specified provider 

PS C:\> New-WinEvent -ProviderName Microsoft-Windows-PowerShell -Id 45090 -Payload @("Workflow", "Running")

This command uses the New-WinEvent cmdlet to create event 45090 for the Microsoft-Windows-PowerShell provider.

Required Parameters

-Id
Type: Int32
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-ProviderName
Type: String
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Optional Parameters

-Payload
Type: Object[]
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Version
Type: Byte
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Inputs

None

You cannot pipe input to this cmdlet.

Outputs

None

This cmdlet does not generate any output.

Notes

  • After the provider writes the even to an event log, you can use the Get-WinEvent cmdlet to get the event from the event log.
  • For information about Event Tracing for Windows, see Improve Debugging And Performance Tuning With ETWhttp://msdn.microsoft.com/en-us/magazine/cc163437.aspx ( http://msdn.microsoft.com/en-us/magazine/cc163437.aspx ).