IT Toolbox
IT Toolbox

Export System and Application logs

View my favorites
CMD Low risk Administrator required

Export System and Application logs

Creates two executable EVTX files in Event Observer or transmitted to technical support.

Command / script 
mkdir "%USERPROFILE%\Desktop\Journaux-Windows" 2>nul
wevtutil epl System "%USERPROFILE%\Desktop\Journaux-Windows\System.evtx" /ow:true
wevtutil epl Application "%USERPROFILE%\Desktop\Journaux-Windows\Application.evtx" /ow:true
echo Export termine.

When should you use it?

Useful for analyzing an incident afterwards or sending logs to a technician.

What the script does

  • wevtutil epl exports a complete event log in EVTX format.
  • The /ow:true option allows an earlier export to be overwritten.

Precautions

  • Event logs can contain usernames, file paths, and internal information.

Rollback

Delete the Journaux-Windows folder when the diagnostic is complete.

← Back to the script library
♡ 0