{"published":"2014-02-23 23:51:35","provider_name":"Hatena Blog","blog_url":"https://syghira.hateblo.jp/","url":"https://syghira.hateblo.jp/entry/2014/02/23/235135","type":"rich","title":"export event log on remote machine with wevtutil","author_url":"https://blog.hatena.ne.jp/syg_hira/","author_name":"syg_hira","image_url":null,"height":"190","provider_url":"https://hatena.blog","width":"100%","description":"when wevtutil 'remote' option is specifies, is a local path on remote machine. not UNC...It's tricky.exampleRemote Machine:RServer wevtutil export-log \"System\" \"D:\\Log\\Exported\\Sys.evtx\" /Remote:LServer The file will exported as \\\\RServer\\D$\\Log\\Exported\\Sys.evtx","categories":[],"version":"1.0","blog_title":"syg_hira's tech-work memo","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fsyghira.hateblo.jp%2Fentry%2F2014%2F02%2F23%2F235135\" title=\"export event log on remote machine with wevtutil - syg_hira&#39;s tech-work memo\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>"}