Solved

I need to write a program to extract data from a Windows 2000 Application Event Log

Posted on 2008-10-09
3
448 Views
Last Modified: 2012-06-21
This event log needs to be analyzed, but it is apparently corrupt - i can't seem to open it it any event viewer... it seems to be corrupt.

Is there a good site documenting the file format for an application event log?

Thanks

0
Comment
Question by:hamlin11
  • 2
3 Comments
 
LVL 3

Assisted Solution

by:tdor
tdor earned 500 total points
ID: 22682444
Hello hamlin11,

The FixEvt tool can help you recover the data in the event logs

Here is where you can download it
http://www.murphey.org/fixevt.html

Regards,

tdor
0
 
LVL 3

Accepted Solution

by:
tdor earned 500 total points
ID: 22682456
And the manual method if you like to know what FixEvt is doing

http://linuxbox.cms.udel.edu/forensics/repaireventlogfile.htm
0
 

Author Closing Comment

by:hamlin11
ID: 31504830
Thanks - that tool was nice
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Real-time is more about the business, not the technology. In day-to-day life, to make real-time decisions like buying or investing, business needs the latest information(e.g. Gold Rate/Stock Rate). Unlike traditional days, you need not wait for a fe…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question