Centrally Collect Event Viewer Logs

Posted on 2008-11-19
Last Modified: 2012-05-05

I have 5 Windows 2003 Servers from which i have to save event viewer logs.
He have a policy and the event viewer logs are cleared every 14 days (2weeks)
Is it possible to automatically save event viewer logs centrally lets say to a shared folder prior to clearing them
Please note that buying a commercial product is out of question.    

Question by:Foukos
    LVL 14

    Expert Comment

    by:Hedley Phillips
    You can change the directory that they are written to easily with a registry edit.


    Changing the Location of the Event Log

    Or you could have a script to email or move the files to you or another location. Perl or VB will do this.

    LVL 14

    Accepted Solution

    Just found this for you:

    Microsofts EventCombMT
    "allows querying multiple Event Viewer logs for specific events (both for the pre-defined and user-defined). When the query completes, the search results placed to the output directory as a text file. Later, for analysis, this file can be imported into SQL Server database or Microsoft Excel."

    More details and other alternatives on this page here:

    Also, a VB script written by someone else.

    Topic: Copy Event Logs to Remote Location

    LVL 14

    Expert Comment

    by:Hedley Phillips
    Did either of these suggestions help?

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
    INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now