Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 480
  • Last Modified:

windows 8 audit log files location

On a windows 8 PC, what is the actual file which stores local logon events. We have a copy of all files from a Windows 8 PC, and need some utility to review the actual audit log events, but need to know whcih file they are stored in first (and where that file lives by default), plus any suggestions on a tool which can take orphansed event log files and produce a report from them (i.e. allow you to filter for logon events).
0
pma111
Asked:
pma111
3 Solutions
 
John HurstBusiness Consultant (Owner)Commented:
The Event Logs are stored here:

C:\Windows\System32\winevt\Logs

I do not know how easily they can be moved or viewed. Here is an older Microsoft Technical Article that you may be able to adapt.

https://support.microsoft.com/kb/315417
0
 
David Johnson, CD, MVPOwnerCommented:
you can open them in the event viewer
0
 
McKnifeCommented:
...and the particular file is security.evtx
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now