Here are the three commands to extract Even logs using PowerShell. Using Get-WinEvent Using Get-EventLog Using wevtutil for Raw EVTX Logs You can run these commands on PowerShell or Windows Terminal.
If you see Event ID 521 along with a message saying Unable to log events to security log on Windows Server, here is how you can fix the problem. It appears when the maximum log size is set to minimum ...