How To Export Windows Event Logs

Applies To:

Halcyon Windows

Overview:

As part of the investigation process, Support may require the collection of Windows event logs alongside agent logs. This information is used to correlate events, analyze system behavior, and accurately pinpoint the source of the issue.

Action:

To export application, security and system logs, follow these steps:

1. Press Windows Key + R, type eventvwr, and press Enter.
2. In the left pane, expand Windows Logs.
3. Select Application.
4. In the right pane, click Save All Events As….
5. Save the file as Application.evtx.
6. Repeat the same steps for:
   • Security (save as Security.evtx)
   • System (save as System.evtx)

Note: Exporting the Security log may require administrative privileges.

1. Once complete, please zip the three .evtx files together before sharing them.
2. Upload this to the following location: https://spaces.hightail.com/uplink/halcyonup
3. After the upload completes, update the case for Support review.