Centrally Collect Event Viewer Logs


I have 5 Windows 2003 Servers from which i have to save event viewer logs.
He have a policy and the event viewer logs are cleared every 14 days (2weeks)
Is it possible to automatically save event viewer logs centrally lets say to a shared folder prior to clearing them
Please note that buying a commercial product is out of question.    

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hedley PhillipsOwnerCommented:
You can change the directory that they are written to easily with a registry edit.


Changing the Location of the Event Log

Or you could have a script to email or move the files to you or another location. Perl or VB will do this.

Hedley PhillipsOwnerCommented:
Just found this for you:

Microsofts EventCombMT
"allows querying multiple Event Viewer logs for specific events (both for the pre-defined and user-defined). When the query completes, the search results placed to the output directory as a text file. Later, for analysis, this file can be imported into SQL Server database or Microsoft Excel."

More details and other alternatives on this page here: http://www.myitforum.com/articles/17/view.asp?id=8113

Also, a VB script written by someone else.

Topic: Copy Event Logs to Remote Location

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Hedley PhillipsOwnerCommented:
Did either of these suggestions help?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.