REG Input Format From-Entity Syntax

Log Parser

previous page next page

REG Input Format From-Entity Syntax

<from-entity> ::= <registry_key> [ , <registry_key> ... ]
<registry_key> ::= [\\<computer_name>]\[<root_name>[\<subkey_path>]]
<root_name> ::= HKCR |
HKCU |
HKLM |
HKCC |
HKU
The <from-entity> specified in queries using the REG input format is a comma-separated list of registry keys. Valid registry keys are:
  • The registry root (e.g. "\");
  • A system registry root (e.g. "\HKLM");
  • Any key below a system registry root (e.g. "\HKLM\Software\Microsoft").
Registry keys can be optionally preceded by a remote computer name in the UNC notation.

Examples:

FROM \

FROM \HKLM, \HKCU

FROM \\SERVER1\HKLM\Software, \\SERVER2\HKLM\Software

© 2004 Microsoft Corporation. All rights reserved.

previous page start next page