syg_hira https://blog.hatena.ne.jp/syg_hira/ syg_hira's tech-work memo https://syghira.hateblo.jp/ when wevtutil 'remote' option is specifies, is a local path on remote machine. not UNC...It's tricky.exampleRemote Machine:RServer wevtutil export-log "System" "D:\Log\Exported\Sys.evtx" /Remote:LServer The file will exported as \\RServer\D$\Log\Exported\Sys.evtx 190 <iframe src="https://hatenablog-parts.com/embed?url=https%3A%2F%2Fsyghira.hateblo.jp%2Fentry%2F2014%2F02%2F23%2F235135" title="export event log on remote machine with wevtutil - syg_hira&#39;s tech-work memo" class="embed-card embed-blogcard" scrolling="no" frameborder="0" style="display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;"></iframe> Hatena Blog https://hatena.blog 2014-02-23 23:51:35 rich https://syghira.hateblo.jp/entry/2014/02/23/235135 1.0 100%