Topics
Issue #
- How to get Event Viewer logs from the command line?
Resolution #
- wevtutil.exe epl Application ApplicationLog.evtx
- wevtutil.exe epl System SystemLog.evtx
NOTE: Run cmd as Administrator
OR
Go to Event Viewer
System logs : Windows Logs > System; Right click then Save All Events As > Filename.evtx > Save
Application logs : Windows Logs > Application > Right click then Save All Events As > Filename.evtx > Save
OR to access event viewer of other machine
eventvwr.exe