ECC autofix response for alert notification

I enabled the autofix for security log backup. the auto fix is predefined from EMC. It is supposed to run a backup of the event log and clear it.
This did run after an alert condition. Where is the backup being sent? Manually the backup would have an .evt extension. I searched this and found nothing.

Thanks