Solved

I need to write a program to extract data from a Windows 2000 Application Event Log

Posted on 2008-10-09
3
451 Views
Last Modified: 2012-06-21
This event log needs to be analyzed, but it is apparently corrupt - i can't seem to open it it any event viewer... it seems to be corrupt.

Is there a good site documenting the file format for an application event log?

Thanks

0
Comment
Question by:hamlin11
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 3

Assisted Solution

by:tdor
tdor earned 500 total points
ID: 22682444
Hello hamlin11,

The FixEvt tool can help you recover the data in the event logs

Here is where you can download it
http://www.murphey.org/fixevt.html

Regards,

tdor
0
 
LVL 3

Accepted Solution

by:
tdor earned 500 total points
ID: 22682456
And the manual method if you like to know what FixEvt is doing

http://linuxbox.cms.udel.edu/forensics/repaireventlogfile.htm
0
 

Author Closing Comment

by:hamlin11
ID: 31504830
Thanks - that tool was nice
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Configuring Remote Assistance for use with SCCM
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question