Event Log Export utility (logexport.exe)
This utility is available in Enterprise and Forensic editions of Event Log Explorer.
Log Export utility lets you export event logs into different document formats. You can find logexport.exe in Event Log Explorer application folder.
Usage
logexport /OPTION:VALUE [/OPTION:VALUE] ...
logexport [/TASK:<task_file_name>]
[/HOST:<host_name>]
[/USER:<user_name>]
[/PASSWORD:<password>]
[/LOGNAME:<log_name>]
[/EDR:{all|ri|render|no}]
[/TARGET:{EXCEL|CSV|HTML|PDF}]
[/TDIR:<target_dir_name>]
[/TFILE:<target_file_name>]
[/VERBOSE:{0|1|2|3}]
|
Option
|
Value
|
Description
|
|
/TASK
|
<task_file_name>
|
Specifies path to xml file name that describes the task.
Mandatory if /LOGNAME not specified
|
|
/HOST
|
<host_name>
|
If /TASK not specified, /HOST defines the host name to read events from.
If no /TASK and no /HOST specified, localhost implied.
|
|
/HFT
|
{fail|tolerate}
|
Host fail tolerance. Defines the behavior when the task lists several hosts and logs from one of the hosts are not available.
Values:
fail - terminate if the logs unavailable.
tolerate - ignore the host and continue with the others.
Optional. Default value: tolerate.
|
|
/USER
|
<user_name>
|
Specifies user name to access logs.
Optional.
|
|
/PASSWORD
|
<password>
|
Specifies user password to access logs.
Optional.
|
|
/LOGNAME
|
<log_name>
|
Specifies log name or log file name to export.
Mandatory if /TASK not specified.
For a log file, you must provide a full path in double quotes.
|
|
/EDR
|
{all|ri|render|no}
|
Specifies event description rendering options.
Values:
no - do not render event description.
render - render event description.
ri - use event RenderingInfo.
all - try RenderingInfo, if not available,
render description.
Optional. Default value: all.
|
|
/TARGET
|
{Excel|ODS|CSV|HTML|PDF}
|
Specifies the target file type.
Excel - Microsoft Excel (XLSX file).
ODS - Open Office spreadsheet format.
CSV - coma separated text.
HTML - HTML format.
PDF - Adobe PDF fornat.
Optional. Default value: Excel.
|
|
/TDIR
|
<target_dir_name>
|
Specifies the location (folder) of the target file.
Optional. Default value: Current_Folder.
|
|
/TFILE
|
<target_file_name>
|
Specifies name of the target file.
Optional. If not specified, will be named
automatically. If a full path is specified
TDIR will be ignored.
If TARGET is HTML, TFILE specifies name of the
folder in which html files will be created.
|
|
/VERBOSE
|
{0|1|2|3}
|
Specifies verbosity level.
Values:
0 - display all information.
1 - display event message rendering issues, warnings and errors.
2 - display warning and errors.
3 - display errors only.
Optional. Default value: 2.
|
Examples:
Export local Application log into Excel file:
logexport /LOGNAME:Application /TFILE:App.xlsx
Export Security log from Server into PDF file and autoname this file:
logexport /HOST:Server /LOGNAME:Security /TARGET:PDF
Export log file into HTML files:
logexport /LOGNAME:"C:\LogFiles\sys.evtx" /TARGET:HTML /TFILE:"C:\LogFiles\Exported"
Export Event Log Explorer task into Excel file and autoname it:
logexport /TASK:"C:\Tasks\mytask1.xml"
