| ☝️ EventLook is now available in Microsoft Store! |
|---|
A fast & handy alternative to Windows Event Viewer
The inbox Windows Event Viewer is a great app that provides comprehensive functionalities in examining events. However, the user experience is not as good as I wish in some usage scenarios - for example, as the list view does not provide a preview for event messages, it would not be suitable to overview what was happening in the machine. EventLook aims to offer an alternative when you want to quickly examine Event Logs, with such UX issues addressed.
- Overview events with Event Log messages
- Asynchronous event fetching for quick glance
- Provides quicker sort, specifying time range, and filters
- Supports auto refresh with new events highlighted
- Provides access to all Event Logs in local machine, including Applications and Services Logs
- Supports .evtx file (open from Explorer or drag & drop .evtx file)
- Double click to view event details in XML format
- Right click to quickly filter events
- Adjust time of events by time zone (Useful when you investigate .evtx file from different time zone)
Install from Microsoft Store.
Alternatively, you could download the latest artifact from Actions, unzip it, and run EventLook.exe. Settings will be saved in user.config under %LOCALAPPDATA%\EventLook. No registry is used.
- WPF on .NET 8
- The basic structure for DataGrid with filters is based on an article in CodeProject: Multi-filtered WPF DataGrid with MVVM
- MVVM Toolkit
- Extended WPF Toolkit
- Reading event logs are done by APIs in System.Diagnostics.Eventing.Reader namespace. The API provides a unified access to logs both from the legacy Event Logging and the modern Windows Event Log infrastructure.
We welcome your code! A standard contribution procedure is as follows:
- Fork it to your account
- Create your feature branch (git checkout -b my-new-feature)
- Commit your changes (git commit -am 'Add some feature')
- Push to the branch (git push origin my-new-feature)
- Create a new Pull Request
If you have a desired feature, please let me know by opening a new issue 😉