Solved

windows 8 audit log files location

Posted on 2014-12-30
3
401 Views
Last Modified: 2014-12-31
On a windows 8 PC, what is the actual file which stores local logon events. We have a copy of all files from a Windows 8 PC, and need some utility to review the actual audit log events, but need to know whcih file they are stored in first (and where that file lives by default), plus any suggestions on a tool which can take orphansed event log files and produce a report from them (i.e. allow you to filter for logon events).
0
Comment
Question by:pma111
3 Comments
 
LVL 91

Accepted Solution

by:
John Hurst earned 167 total points
ID: 40523604
The Event Logs are stored here:

C:\Windows\System32\winevt\Logs

I do not know how easily they can be moved or viewed. Here is an older Microsoft Technical Article that you may be able to adapt.

https://support.microsoft.com/kb/315417
0
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 167 total points
ID: 40523827
you can open them in the event viewer
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 166 total points
ID: 40524004
...and the particular file is security.evtx
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
OfficeMate Freezes on login or does not load after login credentials are input.
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now