8859: How to export and view Windows Event Logs

use Google Translate

Operating Systems: 

Last update: 31-05-2021

How to export and view event logs in Windows

Introduction

For troubleshooting purposes, it may be necessary to export Windows Event Logs.

Solution

Exporting Windows Event Logs

  1. Invoke Windows Event Viewer:
    • Windows 8/8.1/10, Windows Server 2012/2016/2019:
      - press Win + R;
      - in the Run window that opens, type eventvwr.msc and press Enter

    • Windows Vista/7/2008/2008R2: Hit Start and type in eventvwr.msc:

    • Windows XP/2003/2000: Hit Start-Run and type in eventvwr.msc:

  2. Select the type of logs you need to export: usually, Application and System logs are required

    Windows 7/8/8.1/2008/2008R2/2012/2012R2 and later

    Windows XP

  3. Save the log:
    • Windows 7/8/8.1, Windows Vista, Windows Server 2008/2008R2/2012/2012R2 and later: Action -> Save All Events As...
    • Windows XP/2000/2003: Action -> Save Log File As... (!) It is recommended to save the System and the Application event logs, and name them accordingly.

    Windows 7/8/8.1/2008/2008R2/2012/2012R2

    Windows XP

Viewing Windows Event Logs

  1. Invoke Windows Event Viewer:
    • Windows 8/8.1/10, Windows Server 2012/2016/2019:
      - press Win + R;
      - in the Run window that opens, type eventvwr.msc and press Enter

    • Windows Vista/7/2008/2008R2: Hit Start and type in eventvwr.msc:

    • Windows XP/2003/2000: Hit Start-Run and type in eventvwr.msc:

  2. Open the saved log file:
    • Windows 7/8/8.1/10, Windows Vista, Windows Server 2008 and later: Action -> Open Saved Log...
    • Windows XP/2000/2003: Action -> Open Log File...

    Windows 7/8/8.1/2008/2008R2/2012/2012R2

    Windows XP

    (!) If the log is inside a ZIP file, extract it first.

    (!) For Windows XP, when opening a log, you have to select the log type, (Application, System, Security etc).

More information

See also AcronisInfo Utility.

Tags: