Solved

Exporting Windows and System Event Logs

Posted on 2013-06-03
2
430 Views
Last Modified: 2013-06-03
I need to export over 12 months of Windows and System Event logs from a user's system (Win 7).  A ton of logs in other words.    I've connected into their system and am presently in eventvwr.msc but am unable to do a mass export of the Win or Sys logs because it's just limiting me to 256 logs per copy or save as.  Is there a way around this?   Thanks for your help.
0
Comment
Question by:itsmevic
2 Comments
 
LVL 4

Accepted Solution

by:
thelug earned 250 total points
ID: 39217038
0
 
LVL 77

Assisted Solution

by:arnold
arnold earned 250 total points
ID: 39217195
There are vbscript and powershell type mechanism to access that information.  F you have a windows 2008 in the environment, you could setup event log forwarding that will be aggregated on the win2k8.

If you need this also going forward and if you have flexibility, using SNMP with snmptrap (evntwin) to have the specified events reported out to an SNMPTRAP server.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now