Is the EVTX converter free and does it upload my file?

It is free and nothing is uploaded. The .evtx is read into your browser's memory and parsed locally with a Rust/WebAssembly parser; you can disconnect from the network and it still works.

How do I convert EVTX to XML without Windows?

Use this in-browser converter on Linux or macOS, or the evtx_dump CLI. Both rebuild the event XML offline — no Event Viewer, wevtutil or Windows runtime needed.

Can I convert a large or multiple EVTX files?

Yes. A few hundred MB is comfortable in a modern browser, and you can load multiple .evtx files and export them as one combined CSV or JSON.

Convert EVTX to XML, JSON or CSV

Turn a Windows .evtx event log into clean XML, JSON or CSV directly in your browser. Parsing and conversion run client-side via a Rust parser compiled to WebAssembly, so the file never leaves your device — no upload, no install, no Windows host required.

Open the EVTX converter ↗

Which format do you need?

EVTX to XML

Each event in a .evtx file is stored as BinXML against a template table. The converter rebuilds the exact <Event> XML for every record — the same structure wevtutil or Get-WinEvent would emit — so you can grep, diff or feed it into an XML-aware pipeline.

EVTX to JSON

JSON export flattens each record's System block and EventData fields into one object per event, ready for jq, a SIEM ingest path or a notebook. The raw event XML is included alongside the parsed fields when you need both.

EVTX to CSV

CSV export gives you one row per event with the common columns (record, time, level, Event ID, provider, channel, computer). Filter to a single Event ID first and the EventData keys become real columns — open the result straight in Excel.

How to convert an EVTX file

1
Open the converterOpen the EVTX parser homepage. Nothing is uploaded — the page loads a WebAssembly parser that runs entirely in your browser tab.
2
Drop your .evtx fileDrag a .evtx file (Security.evtx, System.evtx, Sysmon, PowerShell…) onto the drop zone, or click to choose one. You can drop several files at once to convert them together.
3
Export to XML, JSON or CSVFilter or sort if you like, then click Export. Choose JSON or CSV, or enable the raw-XML column to capture each event's full XML. The file downloads locally.

EVTX conversion FAQ

Is the EVTX converter free and does it upload my file?: It is free and nothing is uploaded. The .evtx is read into your browser's memory and parsed locally with a Rust/WebAssembly parser; you can disconnect from the network and it still works.
How do I convert EVTX to XML without Windows?: Use this in-browser converter on Linux or macOS, or the evtx_dump CLI. Both rebuild the event XML offline — no Event Viewer, wevtutil or Windows runtime needed.
Can I convert a large or multiple EVTX files?: Yes. A few hundred MB is comfortable in a modern browser, and you can load multiple .evtx files and export them as one combined CSV or JSON.