Return to site

Convert evtx file to text

broken image
broken image
broken image

After choosing the TXT format, I will name the file.

broken image

Right click【 Save all events as】Option to change the save format to TXT format.Ħ. Then look to the right and find【 Save all events as】Option, save to an easy to find place.ĥ. Click the third item【 system】, a message appears on the right, where the red exclamation mark is the error message.Ĥ.

broken image

If there is no event viewer in the option, you can find it in the control panel.ģ. In the start option, find the event viewer. Enter the win2008 server, Click start in the lower left corner.Ģ. It’s impossible to open these logs in a conventional way, because they are not coded normally, but are garbled. You can know the dynamic of the server by looking at these logs, so as to better maintain the server.