CMD · Logs

Export System and Application event logs

Creates two EVTX files that can be opened in Event Viewer or sent to technical support.

Low riskAdministrator rights may be required

Command

mkdir "%USERPROFILE%\Desktop\Journaux-Windows" 2>nul
wevtutil epl System "%USERPROFILE%\Desktop\Journaux-Windows\System.evtx" /ow:true
wevtutil epl Application "%USERPROFILE%\Desktop\Journaux-Windows\Application.evtx" /ow:true
echo Export termine.

When to use it

Useful for analyzing an incident afterwards or sending logs to a technician.

How it works

wevtutil epl exports a complete event log in EVTX format.
The /ow:true option allows an earlier export to be overwritten.

Precautions

Event logs can contain usernames, file paths, and internal information.

Rollback

Delete the Journaux-Windows folder when the diagnostic is complete.

Support the development of BAOI Hosting, domains and new IT resources.

❤️ Support BAOI