?
Solved

I need to write a program to extract data from a Windows 2000 Application Event Log

Posted on 2008-10-09
3
Medium Priority
?
452 Views
Last Modified: 2012-06-21
This event log needs to be analyzed, but it is apparently corrupt - i can't seem to open it it any event viewer... it seems to be corrupt.

Is there a good site documenting the file format for an application event log?

Thanks

0
Comment
Question by:hamlin11
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 3

Assisted Solution

by:tdor
tdor earned 2000 total points
ID: 22682444
Hello hamlin11,

The FixEvt tool can help you recover the data in the event logs

Here is where you can download it
http://www.murphey.org/fixevt.html

Regards,

tdor
0
 
LVL 3

Accepted Solution

by:
tdor earned 2000 total points
ID: 22682456
And the manual method if you like to know what FixEvt is doing

http://linuxbox.cms.udel.edu/forensics/repaireventlogfile.htm
0
 

Author Closing Comment

by:hamlin11
ID: 31504830
Thanks - that tool was nice
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows 10 Creator Update has just been released and I have it working very well on my laptop. Read below for issues, fixes and ideas.
In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question