I can almost hear a Monty Python-esque "Four Yorkshiremen" style conversation starting across the Developer Community now
"h" is short for "halt", however I would advise against using "halt" and stick to "h".
The reason?
Glad you asked...
...a nameless soul some years ago used to type in all COS command in full. Unfortunately, one day, he happened to be logged into the IBM he was working on - as root - and typed in "halt", thinking he was in Caché (actually MSM at the time) ...but he wasn't - he was at the # (root user) prompt in AIX and the halt command proceeded to stop the whole IBM immediately. Were this Caché it may have recovered easier but it wasn't and the databases ended up like swiss cheese - just a warning folks
Assumedly, you also may only want to see "new" additions to the log file. My thoughts on this would be as follows;
Method 1 - Using COS code throughout
Method 2 - Using OS tools
If you really only want "...to write the event log to the text file..." then you can either use COS or a simple copy command at the OS level to copy the log file to another text file