{{ firstError }}

Netwrix Event
Log Manager

Freeware tool that collects Windows server event logs from computers across your network and alerts on critical events in real time.
{{ firstError }}
We care about security of your data. Privacy Policy
"There's scads of events you need to keep an eye open for. The tool helps locate them and alert you. If you take your network security seriously, this will help."

Richard Muniz,

Network/Systems Administrator

How Much Time Do You Spend on Reviewing Windows Server Event Logs Looking for Critical Events?

Netwrix Event Log Manager is a freeware tool that collects, consolidates and archives Windows server logs, including application logs, application services logs and security logs, from computers across your network. It also alerts you in real time about critical events, based on a configurable list of event IDs, so you can stay on top of activity that could impact security or operations.
Have all event log data in a single view
Consolidates event logs from computers across your network into a central location to facilitate log management.
Be notified about critical events
Immediately alerts on event IDs that you define as critical by sending you and other specified recipients an email notification.
Keep event logs stored for further analysis
Compresses collected logs and archives them in a file system so you can get back to them later for further analysis.
Forget about manual log monitoring processes
Eliminates the need to sift through separate logs from multiple Windows servers in your network.
Ensure compliance
Centrally stores all event logs and enables you to easily access them any time you have an audit check to prove that specific processes are in place.
Get it free of charge
Doesn’t ever expire, so you can be confident it’ll be there for you when you need it most.

Stay on Top of Windows Server Logs

Event Viewer from Microsoft enables you to view and manage Windows event logs on your computer, gather information about hardware and software, and monitor Windows security events. However, sometimes the capabilities of this native tool are just not enough. For instance, you need to spend valuable time scrolling through tons of Windows server log files to spot critical events, such as the installation of a new program on a computer in your network or the creation of a new member in your Domain Admins group. But what if those events slip under your radar? Plus, Event Viewer only shows logs on the computer where it’s installed, so you can view events on only one machine in your network at a time, which is highly inconvenient.

Surpass Native Tools with Efficient Management of Windows Server Event Logs

With Netwrix Event Log Manager, you can efficiently stay on top of Windows server logs across all computers in your network remotely, from a single desktop or laptop. Simply use an intuitive dialog box to specify which machines you need to collect logs from, the file system where the logs will be centrally stored, and the events you want to be alerted about. Then you will be notified in real time via email whenever a critical event occurs on any of those Windows servers, ensuring that no unauthorized activity goes unnoticed. Plus, you can prove to auditors that your logs are being properly archived.

event Log Manager Screen 1 event Log Manager Screen 2
"The email alerts are nice and the fact that it can do multiple servers for free from a single system is a great feature. I'll definitely be keeping this in my toolkit from here on."

Bill Kindle

Spiceworks Community

System Requirements

Netwrix Event Log Manager can be installed on Windows Server 2008, Windows Server 2012 and Windows Server 2016. Get started by simply meeting the following basic system requirements:
Operating System:
  • Windows XP SP3 or above
Other required components:
  • .NET Framework 2.0, 3.0 or 3.5
  • 512MB of RAM
  • 50MB of free disk space
Quick Start Guide:
Netwrix Event Log Manager