{"id":2251,"date":"2020-05-13T09:16:42","date_gmt":"2020-05-13T07:16:42","guid":{"rendered":"https:\/\/support.abelssoft.de\/?p=2251"},"modified":"2020-05-13T09:18:36","modified_gmt":"2020-05-13T07:18:36","slug":"how-to-export-windows-event-log","status":"publish","type":"post","link":"https:\/\/wp-support.abelssoft.de\/en\/general\/how-to-export-windows-event-log\/","title":{"rendered":"How to export Windows Event Log"},"content":{"rendered":"\n

Sometimes, when there are system errors, we need the event log to be able to analyze problems. To export the Windows Event Log, please open the command prompt once by pressing “Windows-Key” + “R” and type “cmd”, followed by pressing “Enter”.<\/p>\n\n\n\n

Please enter the following commands one after the other. It is best to copy them and then paste them into the command prompt:<\/p>\n\n\n\n

  1. First switch to the desktop with the following command:
    cd \"%UserProfile%\\Desktop\"<\/code><\/li>
  2. Then create an event log folder there:
    mkdir eventlog<\/code><\/li>
  3. Now change to the folder:
    cd eventlog<\/code><\/li>
  4. In this folder you can then use the following commands to export the event logs for application and system one after the other:
    wevtutil epl Application Application.evtx<\/code>
    wevtutil epl System System.evtx<\/code><\/li>
  5. Then change one folder higher again with the command:
    cd ..<\/code><\/li>
  6. And compress the folder with the event logs to an eventlog.zip file:
    powershell Compress-Archive -Path eventlog -DestinationPath eventlog.zip<\/code><\/li>
  7. Then delete the Event Logs folder:
    rd \/s \/q eventlog<\/code><\/li>
  8. Please send us the eventlog.zip<\/li><\/ol>\n\n\n\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    Sometimes, when there are system errors, we need the event log to be able to analyze problems. To export the Windows Event Log, please open the command prompt once by pressing “Windows-Key” + “R” and type “cmd”, followed by pressing “Enter”. Please enter the following commands one after the other. It is best to copy […]<\/p>\n","protected":false},"author":20,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[179],"tags":[],"class_list":["post-2251","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/posts\/2251\/"}],"collection":[{"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/posts\/"}],"about":[{"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/types\/post\/"}],"author":[{"embeddable":true,"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/users\/20\/"}],"replies":[{"embeddable":true,"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/comments\/?post=2251"}],"version-history":[{"count":3,"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/posts\/2251\/revisions\/"}],"predecessor-version":[{"id":2260,"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/posts\/2251\/revisions\/2260\/"}],"wp:attachment":[{"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/media\/?parent=2251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/categories\/?post=2251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp-support.abelssoft.de\/en\/wp-json\/wp\/v2\/tags\/?post=2251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}