wevtail follows Windows event log channels live (push-based, no polling) through the Win32 EvtSubscribe API — like tail -f, but for the event log. It supports following multiple channels at once, colorized or JSON-lines output, XPath filtering, .evtx file replay, and remote-host tailing.
Publisher’s description
What is wevtail?
wevtail is an open-source terminals & cli tool program for Windows from Ldogg123. It is written in Rust.
Installation and requirements
Official installers exist for 64-bit as MSI. Installation asks for administrator rights. The installer supports unattended (silent) installation. An MSI package is available for deployment with Group Policy, Intune or Configuration Manager.
Popularity and file types
The source code on GitHub (Ldogg123/wevtail) has 3 stars. Similar programs include PowerShell, QPDF and Oh My Posh.
Project description on GitHub: “Follow Windows event log channels live — push-based, no polling — with colorized or JSON-lines output, XPath filtering, .evtx replay, and remote-host tailing.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- MSI package for managed deployment
- Documented silent install
Cons
- No native ARM64 build
- Installation needs administrator rights
In short: wevtail is an open-source terminals & cli tool tool for 64-bit PCs. Administrators can deploy it unattended.
Is wevtail safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
CE9D9FA2FD78B8FEB56B1029218C0C5F04E2ECF83489EAC9E41F33B1B6886C81· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 0.1.1Latest | August 14, 2026 | — | 64-bit MSI |
Install from the command line
Silent install ›winget install --id Ldogg123.wevtail -emsiexec /i wevtail-0.1.1-x86_64.msi /qn /norestartmsiexec /x {B8E61C6E-C230-4336-A85D-D86AA41154C5} /qn /norestartRelated guide: How to use winget: install and update apps
Information
- Publisher
- Ldogg123
- Category
- Terminals & CLI tools
- Licence
- MIT OR Apache-2.0
- Price
- Free
- Source code
- github.com/Ldogg123/wevtail
- Written in
- Rust
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- MSI
- Version
- 0.1.1
- Released
- August 14, 2026
- Added to the catalogue
- August 14, 2026
- Versions listed
- 1
- GitHub stars
- 3
- Website
- github.com
- winget ID
- Ldogg123.wevtail
- MSI product code
- {B8E61C6E-C230-4336-A85D-D86AA41154C5}
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to wevtail
See all ›-
PowerShell7.6.9.0PowerShell is a cross-platform task automation solution made up of a command-line shell, a scripting language, and a configuration management framework. PowerShell runs on Windows, Linux, and macOS.Open source689.6K ↓ -
QPDF12.4.2QPDF is a command-line tool and C++ library that performs content-preserving transformations on PDF files.Open source2.1M ↓ -
Open source820.8K ↓ -
Open source290.1K ↓ -
Alacritty0.17.0Alacritty is a free and open-source GPU accelerated terminal emulator focused on performance and simplicity.Open source75.9K ↓ -
Open source1.5M ↓ -
Free5.9M ↓ -
Open source85.7K ↓
Frequently asked questions
Is wevtail free?
Yes. wevtail is open-source software under the MIT OR Apache-2.0 licence.
Is wevtail safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install wevtail with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can wevtail be installed silently?
Yes. The silent install page lists the exact command for each installer, including msiexec for the MSI package.
Does wevtail run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
What are alternatives to wevtail?
PowerShell, QPDF, Oh My Posh, fzf and Alacritty. The alternatives page compares them.
