How to obtain Event Viewer Logs

How to obtain Event Viewer Logs

  
Hello,

During the course of troubleshooting a support case, a support engineer may ask you to obtain Event Viewer Logs from a Windows machine. This is the procedure on how to obtain them:

  1. Open Event Viewer
  2. Expand "Windows Logs"
  3. Right Click "Application"
  4. Select "Save All Events As ..."
  5. Select a file name
  6. Make sure "*.evtx" is selected
Do this also for System logs. Send us the resulting evtx files.

Best regards,
Ricardo Silva