Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Moving Security Logs to another pc on a Server

Status
Not open for further replies.

benitos

Technical User
Aug 9, 2001
19
US
Hello,
I am new with NT 4.0, but if I understand correctly, It deletes the security logs every 7 days (if none of the logs have been changed). It keeps one log per day, then it starts deleting (so it really deletes daily). So what I want to do is have a software tool AUTOMATICLY move those security log files to my local workstation on the same network. I have found several software tools but I have to MANUALLY move those files. Can anyone help by either showing be a way to set NT 4.0 to keep the security logs longer than 7 days (I am wanting 30 days) or by recommending some "Automatic file mover". Thanks!!
 
To change the length of the security log in NT you can do the following:

Open Event Viewer and select the security log. From the log menu (top left) select the "Log Settings" option. The window that appears will let you change the length of the log (in days) and will also let you change the maximum size of the log (you may need to increase the size of the log file if you want to keeps 30 days of security information depending on what's being logged).

Hope this helps

SR
 
mrstever,
Yes, that did help, but now what I forgot to mention is that it is not the security logs I need to keep, but the DHCP daily logs! How do you keep the DHCP Logs longer than 7 days.?
 
I'm not sure that you can set DHCP to keep the log files for more than seven days given the naming convention. The files are kept in the sysroot (usually WinNT)\system32\dhcp folder. I guess the only way to keep them for thirty days would be to set up a bath file to run at the end of each day to transfer the file to a differnet location or to rename it, probably to that day's date.

Sorry I can't be of more help

SR
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top