This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 44%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENT%3C/text%3E%3C/svg%3E)
I tried to export different logs from Windows Event Viewer however in many cases, I did get values (= they are codes for some columns values) from the XML presented vue instead of values represented in the Event Viewer GUI interface. so please could you give me a way to get the data from the GUI interface or another way to interact with Windows API to get the necessary mapping values of those codes to their string values?
Please let me know if you have any suggestions. I will be happy with your help.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 34%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EXY%3C/text%3E%3C/svg%3E)
To display an event, you must call the EvtRender function to render it in a displayable form. You can render the event as an XML string or you can render one or more values from the event. An event can also contain messages strings (for example, the event's message string, the channel's message string, or the provider's message string). To get one of the message strings from the event, call the EvtFormatMessage function.
For more information, see Rendering Events, Formatting Event Messages and this sample.
@Nawres Tahri, Do the Windows Event Log API and @RLWA32 's solution about Powershell cmdlets make sense for you?
There are two Powershell cmdlets that can be used with Windows event logs.
Get-WinEvent and the older Get-EventLog