C# code for converting .evt file in to .txt , .csv ?

Sumit Kumawat

9y3.5kVisual Basic .NET

Hi all

I want to convert my .evt(event Viewer) file into .txt ,.csv files and vice versa using c# code.

Please help

TIA

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Tapan Patel9y ago
Accepted answer
only change is I creaetd a list and writing it to .txt file.
public void ReadEventData()
        {
            using (var reader = new EventLogReader(@"path\eventData.evtx", PathType.FilePath))
            {
                EventRecord record;
                List<string> lstEventData = new List<string>();
                for (record = reader.ReadEvent(); record!=null; record= reader.ReadEvent())
                {
                    using (record)
                    {
                        try
                        {
                            lstEventData.Add(string.Join("\t", record.TimeCreated.Value,record.ProviderName,record.FormatDescription()));
                        }
                        catch (Exception ex)
                        {

                            throw;
                        }


                    }
                }
                File.WriteAllLines(@"pathToANewFile\EData.txt", lstEventData.ToArray<string>());

            }
        }
Sumit Kumawat9y ago
hello Tapan Sir,
Thanks for code.
Can you plz share code for conveting it into .txt or .csv file
Tapan Patel9y ago
below is the sample code for reading evtx file (win 7) using c#
public void ReadEventData()
        {
            using (var reader = new EventLogReader(@"path\eventData.evtx", PathType.FilePath))
            {
                EventRecord record;

                for (record = reader.ReadEvent(); record!=null; record= reader.ReadEvent())
                {
                    using (record)
                    {
                        try
                        {
                            string TimeCreated = record.TimeCreated.ToString();
                            string provider = record.ProviderName;
                            string formatDescription = record.FormatDescription();
                            // you may see some exception for format description as we are not providing parameters.
                            Debug.WriteLine($"{TimeCreated} - {provider} - {formatDescription}");
                        }
                        catch (Exception ex)
                        {

                            throw;
                        }


                    }
                }
            }
        }
Zakir Ahamed9y ago
hi Friend,

Use this Code:

logparser "SELECT * INTO output.csv FROM input.evt" -i:EVT -o:CSV

Is the answer I was looking for. quotes around the select statement was not in the manual

or Use this URl:

Here is a C# example:
http://www.codeproject.com/KB/string/EventLogParser.aspx

Microsoft has a log file parser utility that would convert your .EVT file:
http://technet.microsoft.com/en-us/scriptcenter/dd919274

And there are other sources of free EVT parsing utilities, such as this one:
http://4sysops.com/archives/free-evt-logparser-a-windows-event-log-parser/