Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 707
  • Last Modified:

Event viewer storage location

I am wondering where the event viewer stores its data.  I am looking for a way to copy my event viewer logs in real time to another server.  

The scenario is , if someone hacked the terminal server, They would clear the event logs and that would take the entry out with their IP address.  I would like to prevent this from happening by having the even logs for that server in another location on the network... Is this possible ?

0
level9tech
Asked:
level9tech
1 Solution
 
davino_1Commented:
Here's a MS article that should get you what you need: http://support.microsoft.com/kb/315417
0
 
Alan Huseyin KayahanCommented:
Hi level9tech,

           c:\%windir%\system32\config
                 all files with .evt extensions

Regards,

MrHusy
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now