How to create a custom event in the Event Log in Windows Server 2008 R2 with EVENT ID greater than 1000?

[vnat]

I'm trying to test an task / alert I set up, where if a particular EVENT ID is logged to the server Application Log, we receive an email.

I have this set up and want to test it by injecting a test error event.

I found I can do this using a command like this:
eventcreate /L APPLICATION /T Error /so MSSQLSERVER /ID 1479 /D "Test error event - ignore"


However, this will ONLY work if my Event ID is 1000 or below. When I run the above command I get an error:

ERROR: EventID must be in the range of 1 - 1000.
Type "EVENTCREATE /?" for usage.


I researched this and found some articles that mention something that can be installed called Logevent.exe, but in trying to locate this on Microsoft's web site I am only finding it applying to older operating systems. I did find a download for this somewhere but it's on 3rd party site and I'm not clear if it even works on Windows Server 2008 R2.

I don't really understand why Microsoft is limiting this to event ID's under 1000. Is there a work around? I need to test that the email notification is working.

As a side note, I really don't understand why Microsoft deprecates something without first implementing a replacement.


Thanks

Continue reading...