Event Log Not Saving on Local Machine After Use Over Network

[jregan5]

We have 4 computers networked together and must perform weekly audits on
them. Typically we use the event viewer to review the events, then clear the
event log and save it to a file. Recently we've started doing this task for
all 4 machines over the network from a single computer. What's happening,
however, is that after clearing the log on the local machine, the file isn't
saved - we're asked to save, but the file seems to disappear. Can anyone shed
some light on this?

 

[Gerry]

Is it going somewhere unexpected?

Go to Start, Control Panel, Folder Options, View, Advanced Settings and
verify that the box before "Show hidden files and folders" is checked
and "Hide protected operating system files " is unchecked. You may need
to scroll down to see the second item. You should also make certain that
the box before "Hide extensions for known file types" is not checked.
Next in Windows Explorer make sure View, Details is selected and then
select View, Choose Details and check before Name, Type, Total Size, and
Free Space.

You can then search for the three files in C:\WINDOWS\system32\config.
However, I am not sure whether when you save a copy it places the copy
there or somewhere else. The process of archiving logs is described
here:
http://support.microsoft.com:80/default.aspx?scid=kb;en-us;308427&Product=winxp

The value of saving old log files is open to question? What might you
use them for? Event Viewer is a diagnostic tool, which records current
errors. You resolve the problem and the error reports stop. Often an
error occurs and the user restarts the computer. The error is resolved,
perhaps never to occur again.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~