$eventlogs = "Application", "Security", "System" $lognames = $eventlogs | ForEach-Object {$_ + ".evtx"} $path = "C:\EventLogs\" $date = (Get-Date).AddDays(-30) foreach ($logname in $lognames) { $log = Get-WinEvent -LogName $logname -FilterXPath "*[System[TimeCreated[@SystemTime>='$date']]]" $log | Export-EventLog -Path "$path$logname" }