Where does PowerShell store its log files on Windows?

PowerShell

3 log locations · Windows

Event logs (.evtx), not text. Open in Event Viewer. The %4 is literally in the file name.

Where PowerShell keeps its logs

PowerShell logs to %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx on Windows. 2 other Windows log locations are recorded below.

Paths are printed exactly as PowerShell writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.

Finding your way around Windows.

WIN

PowerShell - Windows

Microsoft Corporation

Windows PowerShell 5.1 and below%SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx

Windows PowerShell 5.1 and below%SystemRoot%\System32\Winevt\Logs\Windows PowerShell.evtx

PowerShell 7+%SystemRoot%\System32\Winevt\Logs\PowerShellCore%4Operational.evtx

Wrong path? Add a variant