KNOWLEDGE BASE

Windows Event Viewer Log Files


Published: 10 Feb 2017
Last Modified Date: 27 Sep 2017

Question

How to create a Windows Event Viewer Log for investigation.
 

Environment

  • Tableau Desktop
  • Windows

Answer

To view the Windows Event Viewer log file report, follow these steps:

  1. Click the "Start" button on the machine in question and type “eventvwr” (without the quotation marks) in the Search box.
  2. A window labeled Event Viewer will open.
    • If the "Event Viewer (Local)" folder is not expanded, double-click on the folder icon to expand it.
    • If the "Windows Logs" folder is not expanded, double-click on the folder icon to expand it.
  3. Right-click on "Application" and select "Save All Events As..."
  4. Chose the "Event Log (*.evtx)" file type, name the file "Application" and enter a save location.
  5. Repeat steps 4 and 5 for the "Security" and "System" logs, naming the .evt files "Security" and "System" respectively.
Did this article resolve the issue?