EVENT log redirecting

[balartar123]

I have a problem with event logs getting deleted, it's a long story. I want to have an NT 4.0 event log duplicated to a seperate location so I can keep records of the server activity even after it the original logs have been deleted. Is this possible? Any help would be appreciated. Thanks

 

[Aslamvs]

Hi,

You can use dumpel.exe from Windows 2000 res kit for dumping the Event-logs. And you can use this utility for filtering the event logs. Its good utility for saving your event logs in text or Excel format. Easy to check and use.

check out this link for more info

http://www.tburke.net/info/reskittools/topics/dumpel.htm

generally the event logs are saved in %systemroot%\system32\config folder with extension *.evt . So you can copy these files to another location. Using Task schedular u can schedule the copying of event logs.

Hope this helps
Aslam