To save the current event log to a file, select File -> Save Event Log (Backup) from the main menu. To back up an unopened event log, browse to the log in the computer tree, right-click it, and select Save Log As from the drop-down menu.
By default, the Windows Event Log service does not permit backups across a network. This means that if you need to back up the System log on \\Server, you can only back it up to \\Server.
However, when you back up event logs with Event Log Explorer, you can save logs to any computer across the network. In this case, Event Log Explorer will back up the event log locally and then move the backup file to the target computer. By default, it backs up the event log to the Windows\Temp folder (or ADMIN$\Temp). If you do not have access to this folder, you can create your own shared folder on the remote machine and use it as a temporary folder.
Automatic Event Log Backup
Event Log Explorer can help you automatically back up event logs. To do so, open Event Log Properties dialog (File->Log Properties for the current event log) and enable option: Backup log automatically. When this option is enabled and the event log size reaches Maximum log size value, Windows Event Log service will automatically save the log into Windows\System32\winevt\Logs and clear the log. The name of the backup file is a concatenation of the log file name and the date and time (in coordinated universal time, or UTC). The name has this format:
