| /App, /Sys or /Sec | Specify the log to dump |
| /Since | Since last dump |
| /Overwrite | Overwrite an existing file |
| /Add | Add to an existing file |
| /Message | Decode the message of the event |
| /long | Long format |
| /Ole | Date format Ole |
| /Title | Title |
| /Ascii | Format ascii for the data |
| /Hexa | Format hexa for the data |
| /Evt num | Dump of only the evt with number 'num' |
| /TypeAuditFailure | Choose the type of event you want to dump. You can choose none, one or several types. |
| /TypeAuditSuccess |
| /TypeError |
| /TypeWarning |
| /TypeInfo |
| /Yes | No confirmation before dump |