Solved

windows 8 audit log files location

Posted on 2014-12-30
3
394 Views
Last Modified: 2014-12-31
On a windows 8 PC, what is the actual file which stores local logon events. We have a copy of all files from a Windows 8 PC, and need some utility to review the actual audit log events, but need to know whcih file they are stored in first (and where that file lives by default), plus any suggestions on a tool which can take orphansed event log files and produce a report from them (i.e. allow you to filter for logon events).
0
Comment
Question by:pma111
3 Comments
 
LVL 90

Accepted Solution

by:
John Hurst earned 167 total points
ID: 40523604
The Event Logs are stored here:

C:\Windows\System32\winevt\Logs

I do not know how easily they can be moved or viewed. Here is an older Microsoft Technical Article that you may be able to adapt.

https://support.microsoft.com/kb/315417
0
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 167 total points
ID: 40523827
you can open them in the event viewer
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 166 total points
ID: 40524004
...and the particular file is security.evtx
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now