What is the command line to dump the event log to EVT file?

[Hiyahoo]

I need to dump Application, Security and System eventlog to *.evt file.
Any expert can help?

 

[Claudek]

I use dumpel -

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/dumpel-o.asp

to filter events and dump them on a log file which then gets scripted into an access database.
You can of course use it to just dump the entire contents of the event logs.


Claudius (What certifications??)

http://www.iteq.com.au

 

[Hiyahoo]

Thanks Claudek.

Btw, I use "dumpel -f sysevent.evt -l system" and it is Dump successfully completed. After that I open eventvwr.exe to open sysevent.evt, it show "Unable to complete the operation on "Saved System Log". The event log file is corrupted.

 

[Claudek]

Ah, forgot to mention that the format is different. Dumpel saves in a tab-separated text file which is different from the format the .evt is. Use notepad or even better Excel to open it up. As mentioned, i like this format as it can be scripted into an Access database. Am not sure what tool will dump into an evt format - perhaps a vbscript can do this -ask at

http://www.tek-tips.com/threadminder.cfm?spid=329

Still the dump file from dumpel should be good enough to be honest.





Claudius (What certifications??)

http://www.iteq.com.au