Solved

Method to roll off application/systems log off of server to a different volume

Posted on 2014-01-14
4
322 Views
Last Modified: 2014-03-29
Looking for automated means in Windows Server 2008 on a non-domain server to roll off the application/system logs after meeting a specific quota.  I was looking into maybe using robo copy.  Any suggestions?
0
Comment
Question by:cgooden01
  • 3
4 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 39782197
This tool may be exactly what you're looking for:
http://gallery.technet.microsoft.com/Event-Log-Backup-2f5e82ec

It uses a schedule for the backups and is not based on logfile size.

I would prefer this option to ensure that you keep the files with a defined criteria and date range for easier access and troubleshooting.

The issue is that is your logs are full and there is no space then you'd have problems with the server.

The other issue is that the bigger the log files the longer it will take you to work through them when you have to find something from the archived data.
0
 

Author Comment

by:cgooden01
ID: 39788444
The above stated solution is not working for me like intended. Any other solutions out there
0
 

Accepted Solution

by:
cgooden01 earned 0 total points
ID: 39889171
This worked alot better as a batch file.

rem Script start here
rem Timestamp Generator

set BACKUP_PATH=c:\backup\

rem Parse the date (e.g., Thu 02/28/2013)
set cur_yyyy=%date:~10,4%
set cur_mm=%date:~4,2%
set cur_dd=%date:~7,2%

rem Parse the time (e.g., 11:20:56.39)
set cur_hh=%time:~0,2%
if %cur_hh% lss 10 (set cur_hh=0%time:~1,1%)
set cur_nn=%time:~3,2%
set cur_ss=%time:~6,2%
set cur_ms=%time:~9,2%

rem Set the timestamp format
set timestamp=%cur_yyyy%%cur_mm%%cur_dd%-%cur_hh%%cur_nn%%cur_ss%%cur_ms%

wevtutil epl System %BACKUP_PATH%\system_%timestamp%.evtx
wevtutil epl Application %BACKUP_PATH%\application_%timestamp%.evtx
wevtutil epl Security %BACKUP_PATH%\security_%timestamp%.evtx

rem End of Script

Step 3: Configure script in scheduler
0
 

Author Closing Comment

by:cgooden01
ID: 39963495
Solutions was great, but required modification but was accurate in its response
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question