How to export and view event logs in Windows

Introduction

For troubleshooting purposes, it may be necessary to export Windows Event Logs.

Solution

• Exporting Windows Event Logs
• Viewing Windows Event Logs

Exporting Windows Event Logs

1. Invoke Windows Event Viewer:

   • Windows 8/8.1/10, Windows Server 2012/2016/2019:
     - press Win + R;
     - in the Run window that opens, type eventvwr.msc and press Enter

   • Windows Vista/7/2008/2008R2: Hit Start and type in eventvwr.msc:

     

   • Windows XP/2003/2000: Hit Start-Run and type in eventvwr.msc:

     

2. Select the type of logs you need to export: usually, Application and System logs are required
   

   Windows 7/8/8.1/2008/2008R2/2012/2012R2 and later

   Windows XP

3. Save the log:
   • Windows 7/8/8.1, Windows Vista, Windows Server 2008/2008R2/2012/2012R2 and later: Action -> Save All Events As...
   • Windows XP/2000/2003: Action -> Save Log File As... (!) It is recommended to save the System and the Application event logs, and name them accordingly.

   Windows 7/8/8.1/2008/2008R2/2012/2012R2

   Windows XP

Viewing Windows Event Logs

1. Invoke Windows Event Viewer:

   • Windows 8/8.1/10, Windows Server 2012/2016/2019:
     - press Win + R;
     - in the Run window that opens, type eventvwr.msc and press Enter

   • Windows Vista/7/2008/2008R2: Hit Start and type in eventvwr.msc:

     

   • Windows XP/2003/2000: Hit Start-Run and type in eventvwr.msc:

     

2. Open the saved log file:
   • Windows 7/8/8.1/10, Windows Vista, Windows Server 2008 and later: Action -> Open Saved Log...
   • Windows XP/2000/2003: Action -> Open Log File...

   Windows 7/8/8.1/2008/2008R2/2012/2012R2

   Windows XP

   (!) If the log is inside a ZIP file, extract it first.

   (!) For Windows XP, when opening a log, you have to select the log type, (Application, System, Security etc).

More information

See also AcronisInfo Utility.