Where Are Windows Event Logs Stored?
Windows .evtx log files under winevt Logs, and why Event Viewer beats opening them by hand.
Last updated
Windows keeps event logs as .evtx files under System32, then winevt, then Logs. System.evtx and Application.evtx anchor most troubleshooting.
Open them through Event Viewer, not by double clicking. The viewer parses the binary format and filters by source, while raw files need the same tool anyway.
Where Windows stores this, by platform
C:\Windows\System32\winevt\Logs
Needs admin to browse. Export from Event Viewer (Save All Events As) for portable .evtx copies to share with support.
Frequently asked questions
Which log should I check after a crash?
System for driver and power events around the timestamp, Application for the crashing program. Filter by Critical and Error first.
Can I clear event logs to save space?
Yes from Event Viewer, but export first. Logs rotate on size limits anyway, so manual clearing rarely buys much.
Notice an outdated path? Let us know.