export event log on remote machine with wevtutil
when wevtutil 'remote' option is specifies,
example
Remote Machine:RServer
wevtutil export-log "System" "D:\Log\Exported\Sys.evtx" /Remote:LServer
The file will exported as \\RServer\D$\Log\Exported\Sys.evtx