Administer Event Viewer

[Cristhian]

Hi all,
i have a problem, dayly i save manually log Application Level in a directory Ex. E:\Log , is possible automatic this operation? When WSH?

Thanks for your Answer and I'm sorry but my bad english


Greetings

Cristhian

 

[InfrArch]

hello,

you can do it very easy.
see c:\winnt\system32\config
there is all your eventlog files stored. (appevent.evt;secevent.evt;sysevent.evt ...)
use AT command to copy those files once a day to the required location.

hope it will be useful.


Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.

 

[Cristhian]

Hi VitorKozlov
thank you for ur answer, u resolv my first problem but the second threat is clear the log

Any idea?

Thanks

 

[InfrArch]

Hello Cristhian,

well, I think that you can just change the properties of each log to Overwrite Events older than 1 day. So, if you'r copying these logs once a day, then you will get a new events backup for each day.

Hope it will help you.



Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.