• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 640
  • Last Modified:

Centrally Collect Event Viewer Logs


I have 5 Windows 2003 Servers from which i have to save event viewer logs.
He have a policy and the event viewer logs are cleared every 14 days (2weeks)
Is it possible to automatically save event viewer logs centrally lets say to a shared folder prior to clearing them
Please note that buying a commercial product is out of question.    

  • 3
1 Solution
Hedley PhillipsOwnerCommented:
You can change the directory that they are written to easily with a registry edit.


Changing the Location of the Event Log

Or you could have a script to email or move the files to you or another location. Perl or VB will do this.

Hedley PhillipsOwnerCommented:
Just found this for you:

Microsofts EventCombMT
"allows querying multiple Event Viewer logs for specific events (both for the pre-defined and user-defined). When the query completes, the search results placed to the output directory as a text file. Later, for analysis, this file can be imported into SQL Server database or Microsoft Excel."

More details and other alternatives on this page here: http://www.myitforum.com/articles/17/view.asp?id=8113

Also, a VB script written by someone else.

Topic: Copy Event Logs to Remote Location

Hedley PhillipsOwnerCommented:
Did either of these suggestions help?

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now