drop system evtx csv · WEF subscription 100–104 · wecsvc 7036 7040 · forwarding blackout windows · csv export · runs locally
evtx csv
drop system / forwarding evtx csv
or click
ForwardingPlugin 100–104 · Windows Event Collector (wecsvc) service events
drop system / forwarding plugin evtx csv