

But, I am a bit put-back that the visually it is a bit lacking.īut, that only means that the data format is XML or at least published and well understood and that the display just needs to be worked-on. Once XQuartz is running, please go back and run evtx_viewĪnd, you should now see a running XApp App.Īnd, yes we are able to read MS Windows Log Files on Mac OS/X via this free rool evtx_view. Once launched, run the Ruby script again and you should see a tiny window with the title “Hello World.”īut, since X Windows support on Mac is now an Open Source project, you want to look for /Applications/Utilities/XQuartz If you roll with Quicksilver, you should be able to type in X11 and launch it that way. You can find it in /Applications/Utilities. It means your X11 terminal isn’t running. You should see an error message that looks something like this:įXRbApp::openDisplay: unable to open display :0.0 To initiate an X-Windows Session, the best help I found are: Goggled and shouted for help and was able to determine that Xwindows needed to be installed and running. When we tried running the App (evtx_view):įXApp::openDisplay: unable to open display :0.0 An XWindows sub-system (that allows Unix type applications to be used on a Mac).So this installs several utilities, including:
Windows event log viewer for mac install#
The install base is quite big about 200 MB.

We needed at minimum a 2.7.2 and so this particular version should be sufficient. Thanks goodness that the version# is part of the dmg file’s name.

So please go ahead to and download XQuartz-2.7.4.dmg. You should use XQuartz version 2.7.2 or later. Which in turn led me to XQuartz project: Link. Tried to install the version for OSX ( evtx_view.v.0.69.), but the system barked at me, that I needed X11 server and client libraries for OS X Mountain Lion. So what to do, tried using the App Store. I need to send Windows Event Viewer Log files (*.evtx) to a colleague whose primary work computer is a Mac OSX. As always, it is one inter-operability problem or another.
