Eventlog cannot set filter - log too big

[Jeremy Sun]

Everytime when I tried to set filter one of the logs for display, it returns
a message something like "Events has been modified, start again?" If you
start again, you wait for another few seconds before the message pop up
again. If you click on No, it just shows you an empty page.

Well, I think it is because the big log that I have, 20MB each.

Anything I can do so that I don't need to manually scan through the logs
looking up a possible entry.

I can't export the events to text, it takes forever.

Regards,
Jeremy

 

[Steven L Umbach]

Try using Event Comb to see if you have any better luck. It is a much better
way to go through the security logs anyway. The links below tell more and
show where to download it from. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308471
http://www.microsoft.com/downloads/...9C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

 

[Jeremy Sun]

You are the man!

Many thanks,
Jeremy

Try using Event Comb to see if you have any better luck. It is a much better
way to go through the security logs anyway. The links below tell more and
show where to download it from. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308471
http://www.microsoft.com/downloads/...9C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en