Solved

Method to roll off application/systems log off of server to a different volume

Posted on 2014-01-14
4
319 Views
Last Modified: 2014-03-29
Looking for automated means in Windows Server 2008 on a non-domain server to roll off the application/system logs after meeting a specific quota.  I was looking into maybe using robo copy.  Any suggestions?
0
Comment
Question by:cgooden01
  • 3
4 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 39782197
This tool may be exactly what you're looking for:
http://gallery.technet.microsoft.com/Event-Log-Backup-2f5e82ec

It uses a schedule for the backups and is not based on logfile size.

I would prefer this option to ensure that you keep the files with a defined criteria and date range for easier access and troubleshooting.

The issue is that is your logs are full and there is no space then you'd have problems with the server.

The other issue is that the bigger the log files the longer it will take you to work through them when you have to find something from the archived data.
0
 

Author Comment

by:cgooden01
ID: 39788444
The above stated solution is not working for me like intended. Any other solutions out there
0
 

Accepted Solution

by:
cgooden01 earned 0 total points
ID: 39889171
This worked alot better as a batch file.

rem Script start here
rem Timestamp Generator

set BACKUP_PATH=c:\backup\

rem Parse the date (e.g., Thu 02/28/2013)
set cur_yyyy=%date:~10,4%
set cur_mm=%date:~4,2%
set cur_dd=%date:~7,2%

rem Parse the time (e.g., 11:20:56.39)
set cur_hh=%time:~0,2%
if %cur_hh% lss 10 (set cur_hh=0%time:~1,1%)
set cur_nn=%time:~3,2%
set cur_ss=%time:~6,2%
set cur_ms=%time:~9,2%

rem Set the timestamp format
set timestamp=%cur_yyyy%%cur_mm%%cur_dd%-%cur_hh%%cur_nn%%cur_ss%%cur_ms%

wevtutil epl System %BACKUP_PATH%\system_%timestamp%.evtx
wevtutil epl Application %BACKUP_PATH%\application_%timestamp%.evtx
wevtutil epl Security %BACKUP_PATH%\security_%timestamp%.evtx

rem End of Script

Step 3: Configure script in scheduler
0
 

Author Closing Comment

by:cgooden01
ID: 39963495
Solutions was great, but required modification but was accurate in its response
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will show, step by step, how to integrate R code into a R Sweave document
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
The viewer will learn how to create a basic form using some HTML5 and PHP for later processing. Set up your basic HTML file. Open your form tag and set the method and action attributes.: (CODE) Set up your first few inputs one for the name and …

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now