====== Dump Windows events into files ======

You can use the Data Protection for Exchange console to list the events that
originate by Data Protection for Exchange. 
  Select Dashboard - ServerName > Diagnostics > System Information and double-click the **dpevents.ps1** script in the

On Windows Server 2008 and later, You can use PowerShell scripting to list the
events information. You can also use the export function from within the Event
Viewer to do this function. The utility, by default, produces a tabular listing of all
event log records in three sections (one section per event log type). Specify the
type of event log you require by using one of the following /L parameters:
  /L Application
  /L/LSecurity
  /L System
The following example generates output only for the application and system event logs:
  cscript c:\windows\system32\eventquery.vbs /L Application >eq_app.out
  cscript c:\windows\system32\eventquery.vbs /L System >eq_sys.out
You can use the /V parameter to receive detailed (verbose) output:
  cscript c:\windows\system32\eventquery.vbs /V >eq.out
  cscript c:\windows\system32\eventquery.vbs /L System /V >eq_sys.out
You can use the /FO parameter to specify tabular, list, or comma-separated (CSV)
output. The following are the different methods of specifying the output:
  /FO TABLE
  /FO LIST
  /FO CSV
The default format is TABLE.

The following example generates a detailed CSV file of the application log:
  cscript c:\windows\system32\eventquery.vbs /L Application /FO CSV /V >eq_app.out
You can get more help information for the tool by using the following example:
  cscript c:\windows\system32\eventquery.vbs /?
  
To increase the number of events that are logged by the Microsoft Exchange Writer, use the **Set-EventLogLevel** PowerShell cmdlet command.