<div>
Here's a MS article that should get you what you need: <a href="http://support.microsoft.com/kb/315417" rel="ugc">http://support.microsoft.com/kb/315417</a>
</div>


Here's a MS article that should get you what you need: http://support.microsoft.com/kb/315417 [http://support.microsoft.com/kb/315417]

<div>
<div class="content wysiwyg-content">
I am wondering where the event viewer stores its data. &nbsp;I am looking for a way to copy my event viewer logs in real time to another server. &nbsp;<br />
<br />
The scenario is , if someone hacked the terminal server, They would clear the event logs and that would take the entry out with their IP address. &nbsp;I would like to prevent this from happening by having the even logs for that server in another location on the network... Is this possible ? <br />
<br />

</div>
</div>


I am wondering where the event viewer stores its data.  I am looking for a way to copy my event viewer logs in real time to another server.  

The scenario is , if someone hacked the terminal server, They would clear the event logs and that would take the entry out with their IP address.  I would like to prevent this from happening by having the even logs for that server in another location on the network... Is this possible ? 



Event viewer storage location

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).