Share via

Extract data from EventLog

Corobori 26 Reputation points
2021-07-16T16:44:22.943+00:00

Hi,

I have got an evtx file containing some information I want to parse. I have seen people pointing to PowerShell scripts, such as this one.

Before dwelling deeper into PowerShell I am wondering if I am going the right way.
What I want to extract from my evtx file are the following data: Exception information and the following Request information: Event time, Request URL, Request path and the User host address

Windows development | Windows API - Win32
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Castorix31 91,876 Reputation points
    2021-07-16T19:25:06.127+00:00

    Use evt APIs (Windows Event Log)
    You can find many samples on Google or MSDN forums, like C++ Program for Extracting data from windows logs in different formats(xml,evts,csv,txt)

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.