locked
wevtutil epl command help RRS feed

  • Question

  • I am trying to export the following events with specific event id i am able to get all the events for particular NetworkProfile but unable to get the results only with event id. I am using the following command.

    wevtutil epl Microsoft-Windows-NetworkProfile/Operational filename.evtx "/q:*[EventId=10000]"

    Monday, January 6, 2020 4:30 AM

Answers