Hi,
event tracing files, for example produced by wusa.exe log parameter, are binary files. The powershell command let Get-WinEvent couldn’t open it but Windows Eventviewer is able to read those files.
There is also an option to convert ETL files.
The command line utility tracerpt.exe could convert it in different formats:
– CSV
– Evtx (Eventlog format, then Get-WinEvent can read this)
– XML
This converts a ETL file into a csv file
PS D:\> tracerpt.exe kb5055518.log.etl -of csv -o kb5055518.csv
or to an evtx file
PS D:\> tracerpt.exe kb5055518.log.etl -of evtx -o kb5055518.evtx PS D:\> Get-WinEvent -Path kb5055518.evtx
Michael