Event Log Files

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hi

does anybody know , how to change the default file location where windows log files are stored. any help in this regard will be greatly appreciated.

regard
Manish
 
http://support.microsoft.com/defaul...port/kb/articles/Q216/1/69.ASP&NoWebContent=1

To modify the location of the Event Viewer log files:
Click Start, click Run, type regedt32, and then click OK.
On the Windows menu, click HKEY_LOCAL_ MACHINE on Local Machine.
For the System log:
Click the System\CurrentControlSet\Services\EventLog\System folder, and then
double-click the FILE value.
Type the new drive and path in the String box, include the file name
\SysEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SysEvent.Evt
For the Application log:
Click the System\CurrentControlSet\Services\EventLog\Application folder, and
then double-click the FILE value.
Type the new drive and path in the String box, include the file name
\AppEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\AppEvent.Evt
For the Security log:
Click the System\CurrentControlSet\Services\EventLog\Security folder, and
then double-click the FILE value.
Type the new drive and path in the String box, include the file name
\SecEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SecEvent.Evt
Quit Registry Editor, and then restart the computer.

(All usual disclaimers and warnings regarding the perils of Registry editing
apply.)
 
Thank You Very much Ma'a

regard
Manis

----- Laura E. Hunter (MVP) wrote: ----

http://support.microsoft.com/defaul...pport/kb/articles/Q216/1/69.ASP&NoWebContent=

To modify the location of the Event Viewer log files
Click Start, click Run, type regedt32, and then click OK
On the Windows menu, click HKEY_LOCAL_ MACHINE on Local Machine
For the System log
Click the System\CurrentControlSet\Services\EventLog\System folder, and then
double-click the FILE value
Type the new drive and path in the String box, include the file name
\SysEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SysEvent.Ev
For the Application log
Click the System\CurrentControlSet\Services\EventLog\Application folder, and
then double-click the FILE value
Type the new drive and path in the String box, include the file name
\AppEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\AppEvent.Ev
For the Security log
Click the System\CurrentControlSet\Services\EventLog\Security folder, and
then double-click the FILE value
Type the new drive and path in the String box, include the file name
\SecEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SecEvent.Ev
Quit Registry Editor, and then restart the computer

(All usual disclaimers and warnings regarding the perils of Registry editing
apply.
 
Back
Top