Grab system event logs remotely?

[thefourthwall]

Hello,

I have been asked to get the system event logs from about 80 desktop PC's on our network, to go through them looking for hard drive errors.

Having said that, my preference would be to not manually connect to each of these PC's via mmc to search their system event logs looking for specific errors.

Any thoughts on a way to automate this process to some degree? I was thinking about just copying each \\hostname\C$\WINDOWS\system32\config\sysevent.evt file, but just don't know if that is the fastest method.

I welcome any thoughts on this.

thank you,
thefourthwall

 

[bcastner]

Consider S.M.A.R.T. monitoring instead:
e.g.:

http://www.bluechillies.com/details/6382.html

Using PerfMon:

http://www.microsoft.com/resources/...proddocs/en-us/sag_mpmonperf_10.mspx?mfr=true

Using DUMPEL:

http://support.microsoft.com/kb/q129266/

Direct download:

http://www.isbgroup.com/PrinterAudit/ELDUMP.EXE

Using EVENTCOMBMT:
Lets you collect specific events from the event logs on multple machines and consolidate them to one central location. Eventcombmt.exe is part of Microsoft's Account Lockout and Management Tools

http://www.microsoft.com/downloads/...9C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

Freeware:

http://downloads.zdnet.com/download...ent+Tools+-+Networking+-+Windows&docid=262825

Inexpensive:

http://downloads.zdnet.com/download...ent+Tools+-+Networking+-+Windows&docid=234029

http://downloads.zdnet.com/download...ent+Tools+-+Networking+-+Windows&docid=230802

____________________________
Users Helping Users

 

[Pleonasm]

Also consider using the free PsLogList tool by Sysinternals.

See:

http://www.sysinternals.com/Utilities/PsLogList.html