Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to export Windows Scheduled task history

On Win2008 R2 - Is there an interface I can go to, or a command I can run, to export the history of one particular task from Windows Task Scheduler? I'll even take all the tasks and then filter the results. The best I can come up with so far is to search in the Event Viewer, using the Event Log C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx for the task in question, and record by hand the time of day it stopped.

Thanks, Dan

like image 457
user241099 Avatar asked Mar 04 '14 20:03

user241099


1 Answers

I found logs for Task Scheduler in C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx When I double click on the file it opens the Event Viewer in that file.

Also, opening the Event Viewer from Administrative Tools I can drill down to Event Viewer >> Applications and Services Logs >> Microsoft >> Windows >> TaskScheduler >> Operational to view the logs I would see from the Task Scheduler Library.

hope this helps - Alan

like image 104
Alan Spillert Avatar answered Nov 11 '22 07:11

Alan Spillert