Get Event Viewer Logs from the Command Line

Topics

Issue #

  • How to get Event Viewer logs from the command line?

Resolution #

  • wevtutil.exe epl Application ApplicationLog.evtx
  • wevtutil.exe epl System SystemLog.evtx

    • NOTE: Run cmd as Administrator

    OR
    Go to Event Viewer
    System logs : Windows Logs > System; Right click then Save All Events As > Filename.evtx > Save
    Application logs : Windows Logs > Application > Right click then Save All Events As > Filename.evtx > Save

    OR to access event viewer of other machine
    eventvwr.exe

X