I have a .evtx (Windows Event Log) file, and want to view it on Linux.


  • Free
  • Easy to install/run
  • Works on Linux
  • Command line tools are OK, GUIs are OK

I found something that meets all your requirements, the only drawback is that the logs are a bit hard to parse by a human.

python-evtx (GitHub repo) is free/libre and is easy to install using pip install python-evtx. Use the command

python /usr/bin/evtx_dump.py some.evtx > some.xml

You'll end up with an XML with the logs content.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.