Windows 10 / 11 · x64
Download full installer
Full installer
Everything is inside, including the .NET runtime. Works on a machine with nothing installed, and on a locked-down PC where you cannot fetch a runtime.
LOGHARVEST Windows log exporter · part of the DataHaat suite
Get the log out of Event Viewer.
Pick the channels you care about, narrow them down to the hour and the keyword that matters, and hand someone a CSV, a JSON file or a PDF they can actually read. No more scrolling through Event Viewer on a call.
Free, no account
Signed installer
Keeps itself updated
Logs to export
System
Application
Security
Setup
[File] srv.evtx
ERRORDisk read timeout on \Device\Harddisk209:14
WARNService start took longer than expected09:12
ERRORApplication hang: ledger.exe not responding08:58
INFOScheduled backup completed08:30
WARNTime service could not reach the peer08:04
2,418 events · 23 Sep, 00:00 → now
CSVJSONHTMLPDF
Filtered 2,418 of 96,540 events
Download LogHarvest
Two installers. Pick by what the machine already has.
Both are the same application, signed the same way. They differ only in whether the .NET runtime travels with them.
Needs .NET Desktop Runtime 8
Download lite installer
Lite installer
Forty times smaller. If the runtime is missing, Setup offers to fetch it for you. Good for rolling out across machines you already manage.
Not sure which? Take the full installer. It is bigger, but it never asks the machine for anything. The lite one is worth it when you are installing on many machines, or when bandwidth matters more than the download size.
SHA-256 · full 7987b84efa9c5a77286fe125282a7abb203924c3c5ad1e2e620d6fdcd200fd76
SHA-256 · lite ded226a27230b171f05c87de92f1d78dcd511260b63f1c8292b3afdb6edacdff
Both are Authenticode-signed by Sanjivani Media and Technologies Private Limited — Windows will show that name in the install prompt.
What's inside
Everything Event Viewer makes hard.
Focused, not bloated — the DataHaat way. LogHarvest does one job: getting the right events out, in a form someone else can open.
Any log, or a file
Tick System, Application, Security or any channel on the machine — or drop in an .evtx file someone sent you.
Filter it down
Date and time range, level, event ID, provider — combine them until only the events that matter are left.
Search the message text
Include and exclude keywords, match any or all of them, case-sensitive when you need it — searching the rendered message, not just the metadata.
Four export formats
CSV for a spreadsheet, JSON for a script, HTML to open in a browser, PDF to attach to a ticket or a report.
The filter travels with it
Every export records exactly which logs and filters produced it, so nobody has to ask what they are looking at.
Keeps itself current
LogHarvest checks DataHaat for new releases and verifies what it downloads before installing it.
Nothing leaves the machine
Logs are read locally and written where you choose. The only thing LogHarvest sends anywhere is a version check.
Free & signed
No cost, no account, no ads — and a properly signed installer, so it does not trip your own security policy.
How it works
Tick, filter, export.
Choose the logs
Tick the channels you want, or add an .evtx file. Show all channels if the one you need is not in the usual list.
Narrow it down
Set the window, the levels and the keywords. The count updates as you go, so you can see when you have the right slice.
Export and send
Save as CSV, JSON, HTML or PDF. The file carries the filter that produced it, so the person receiving it knows what they have.
Changelog
What's new
v1.0.023 Sep 2026
- First release
- Export from any Windows event log channel or an .evtx / .evt file
- Filter by date range, level, event ID, provider and message keywords
- Export to CSV, JSON, HTML and PDF, each carrying its filter summary
- Full and lite installers, both signed, with self-update built in
Stop screenshotting Event Viewer.
Free, signed, and it runs on the machine you are already standing at. Download it once and it keeps itself current.