Save Event Log As File
To save current event log into event log file, select
. To backup unopened
event log, browse for the log in the computers tree, click right
mouse button on it and select from the drop-down menu.
from the main menu or click
By default Windows Event Log service doesn't allow backups
across the network. It means that if you need to backup System log
on \\Server, you can only backup it to \\Server.
When you backup event logs with Event Log Explorer, you can save
logs to any computer across the net. In this case Event Log
Explorer will backup event log locally to Windows\Temp folder, and
move the backup file to the target computer.
You can save/export certain events from event log to .evt file.
To do so, select
or from the main menu to create a new .evt files from
the current event log view or currently selected events.
Automatic Event Log Backup
Event Log Explorer helps you to automatically back up event
logs. To do so, open Event Log
Properties dialog ( for the current event log) and enable option:
Backup log automatically, then clear
it. When this option is enabled and the event log size
reaches Maximum log size value,
Windows Event Log service will automatically save the log into
Windows\system32\config\ (for Windows 2000, XP, 2003 Server) or
Windows\System32\winevt\Logs (for Windows Vista, 7and 2008 Server),
and clear the log. The name of the backup file is a concatenation
of the log file name and the date and time (in coordinated
universal time, or UTC). The name has this format:
You must make sure to move or delete the backup log files from the
System volume. If you do not, the volume may become full.
You can find extra information about auto auto-archiving at