Solved

I need to write a program to extract data from a Windows 2000 Application Event Log

Posted on 2008-10-09
3
450 Views
Last Modified: 2012-06-21
This event log needs to be analyzed, but it is apparently corrupt - i can't seem to open it it any event viewer... it seems to be corrupt.

Is there a good site documenting the file format for an application event log?

Thanks

0
Comment
Question by:hamlin11
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 3

Assisted Solution

by:tdor
tdor earned 500 total points
ID: 22682444
Hello hamlin11,

The FixEvt tool can help you recover the data in the event logs

Here is where you can download it
http://www.murphey.org/fixevt.html

Regards,

tdor
0
 
LVL 3

Accepted Solution

by:
tdor earned 500 total points
ID: 22682456
And the manual method if you like to know what FixEvt is doing

http://linuxbox.cms.udel.edu/forensics/repaireventlogfile.htm
0
 

Author Closing Comment

by:hamlin11
ID: 31504830
Thanks - that tool was nice
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question