A command log is collected only when Command Prompt is started in Windows. When "cmd.exe" or "command.com" is run directly, the command log will not be collected.
Also, the IME (Input Method Editor) in the command operation only supports IME provided by Microsoft.
However, even if you start Command Prompt in Windows, a command log will not be collected for the following:
Processing in batch files.
Operation of the "start" command
Output result of applications output by independent console (example: "telnet, "doskey", "debug" .etc)
If a command with many output results is executed, when confirming the collected command prompt in the Log Viewer, the log will be displayed in shift sometimes.
If one command has more than 300 lines of output results, only 300 lines of the log will be collected.
After the Command Prompt window is closed through the "exit" command or the "x" button, the command log will be collected to the master management server/management server. Therefore, when the user of the client (CT) does not close the Command Prompt window, the command log cannot be collected.
If the properties of the command prompt (size of window buffer and the size of window) are modified (including the time of modifying properties through command), the following states may occur:
The modified settings are invalid.
The window is displayed is distorted.
Part of log is not collected.
In addition, the modified properties will take effect at next startup of the client (CT).
When the command log is collected, date and time will be inserted immediately before the input command. Therefore, the date and time that do not exist in command prompt will be displayed in the Log Viewer.
However, when the next command is input before terminating the command output, data and time will sometimes not be inserted immediately before the input command depending on the timing of input. When there are many output results, the date and time will sometimes be inserted in midway.
Example of display in Command Prompt
C:\Documents and Settings\Administrator>dir The volume label of Drive C does not exist. Volume serial number is EC12-57D0
Example of display in Log Viewer
--[2013/09/05 13:37:19]-- C:\Documents and Settings\Administrator>dir
If the command for displaying the window again is input, logs will be collected twice at one output. (Example: "append" command)
If you start the command prompt from the Quick Access Menu in Windows 8.1 or later, a command log cannot be collected.