Windows event viewer logs location
search cancel

Windows event viewer logs location

book

Article ID: 286787

calendar_today

Updated On:

Products

Carbon Black EDR Carbon Black App Control Carbon Black Cloud Endpoint Standard Carbon Black Cloud Enterprise EDR

Issue/Introduction

Windows event viewer default logs location

Environment

  • All Products
  • Microsoft Windows: All Supported Versions

Resolution

Windows event logs are stored under %SystemRoot%\System32\Winevt\Logs\ with a .evtx extension

Additional Information

Event logs can also be view in Microsoft Event Viewer