Solved

Read partly corrupted Event Logfile

Posted on 2004-09-13
8
223 Views
Last Modified: 2010-04-14
Hi, my RAID array failed for an unknown reason: http://www.experts-exchange.com/Storage/Q_21126972.html

I have been able to partly recover the 3 event log files, they are partly corrupted, contain some unencrypted text but is also encrypted or something by the event viewer.

I know that if I load them into the Windows 2000 event viewer it will just tell me that the files are corrupted... So how can I read these files?

I'm hoping they will give me a clue to why my array failed...
0
Comment
Question by:Occupied
  • 4
  • 4
8 Comments
 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points
ID: 12043211
0
 
LVL 1

Author Comment

by:Occupied
ID: 12043328
Eldump was unable to do anything, it gave me the message that the logfile was corrupted, I'm guessing it used the Windows driver to look at the file because it gave me the error message in Swedish... (my system is Swedish..)

PsLogList gave me the same error message as ElDump...

Dumpel did not seem to have any option to read from a local file...
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 12043363
Hmm - let me take a look at your original question...brb.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 12043462
So how were you able to recover the evt files?  I can't see the image from here (blocked by company proxy).
Doesn't sound good to me though.  Have you tried restorer 2000 by chance?
( http:Q_21014635.html#11240391)

Only other thing I could think is maybe a rom-based log?  Not familiar with your system - so not sure if that's even an option -but if psloglist won't view it, I don't know what will.  Sorry my friend.
Best of luck to you!
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 1

Author Comment

by:Occupied
ID: 12043511
Since my other harddrive in the RAID array lost it's data I have the odd chunks of 32kb from the event viewer files (the even parts was of course on the other harddrive...)... Hence the corruption..

My system is just a desktop computer, the logfile was only saved on the harddrives...
0
 
LVL 1

Author Comment

by:Occupied
ID: 12178181
If no one is able to help me with this how do I close this question? (I'm new to EE...)
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 12184073
Since I'm the only respondant, I can delete/refund if you like.
For future reference:
  See http:help.jsp#hs5
0
 
LVL 1

Author Comment

by:Occupied
ID: 12184813
To have it deleted would be a waste, I'm rewarding you the points because those applications might become useful to me in the future and you took the time to try any answer my question.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Adprep 12 58
Application Deployment - Simple 7 640
Upgrading Windows 2000 SP4 to Windows XP SP2 5 377
Auto kill system process when exceeding 80% CPU in windows 2000 8 211
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now