How to export Windows event logs from Event Viewer

Prev Next

    This article explains how to export Windows Event Viewer logs for troubleshooting and support purposes.  

Authenticator logs may not always contain all the information needed to investigate an issue.   In these cases, Windows Event Viewer logs can provide additional context.   The steps below explain how to export these logs so they can be attached to a support request.

  1. Open Event Viewer by selecting Start and typing eventvwr in the search box, or press Windows key + R, type eventvwr, and click OK.  

    Opening Event Viewer

  2. In Event Viewer, expand Windows Logs and select Application.    

    Windows Logs Application view

  3. From the menu bar, click ActionSave All Events As….    

    Save All Events As option

  4. Ensure Save as type is set to .evtx, then choose a destination folder and save the file.    

    Save as EVTX

  5. If prompted to Display information, select the Display information option (unless otherwise instructed by support) and click OK.    

    Display information prompt

  6. This process creates an .evtx file and a folder named LocaleMetaData in the destination directory. Compress (zip) both the file and the folder together, then attach the ZIP file to your support case.