relocating event logs

[Mark Blum]

Is there anyway to relocate events logs for servers to a specific server? I
would like to keep more events, but am space restrictive.

 

[Bob Qin [MSFT]]

Hi Mark,

Thanks for your posting here.

To modify the location of the Event Viewer log files, please try these
steps:

1. Click Start, click Run, type "regedt32" (without the quotation marks),
and then click OK.

2. On the Windows menu, click "HKEY_LOCAL_ MACHINE on Local Machine".

- For the System log:

a. Click the
System\CurrentControlSet\Services\EventLog\System folder, and then
double-click the FILE value.

b. Type the new drive and path in the String box, include the file name
\SysEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SysEvent.Evt

- For the Application log:

a. Click the System\CurrentControlSet\Services\EventLog\Application
folder, and then double-click the FILE value.

b. Type the new drive and path in the String box, include the file name
\AppEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\AppEvent.Evt

- For the Security log:

a. Click the
System\CurrentControlSet\Services\EventLog\Security folder, and then
double-click the FILE value.

b. Type the new drive and path in the String box, include the file name
\SecEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SecEvent.Evt

3. Quit Registry Editor, and then restart the computer.

For additional information about how to change the default Event Viewer log
file location, click the article number below to view the article in the
Microsoft Knowledge Base:

How to Change the Default Event Viewer Log File Location
http://support.microsoft.com/?id=216169

HOW TO: Move Event Viewer Log Files to Another Location in Windows 2000
http://support.microsoft.com/?id=315417

Thanks for using Microsoft News Group!

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Mark Blum]

Thank you.

-----Original Message-----
Hi Mark,

Thanks for your posting here.

To modify the location of the Event Viewer log files, please try these
steps:

1. Click Start, click Run, type "regedt32" (without the quotation marks),
and then click OK.

2. On the Windows menu, click "HKEY_LOCAL_ MACHINE on Local Machine".

- For the System log:

a. Click the

System\CurrentControlSet\Services\EventLog\System
folder, and then

double-click the FILE value.

b. Type the new drive and path in the

String box, include the file name

\SysEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\SysEvent.Evt

- For the Application log:

a. Click the System\CurrentControlSet\Services\EventLog\Application
folder, and then double-click the FILE value.

b. Type the new drive and path in the

String box, include the file name

\AppEvent.Evt, and then click OK. The default path is
%SystemRoot%\System32\Config\AppEvent.Evt

- For the Security log:

a. Click the

System\CurrentControlSet\Services\EventLog\Security
folder, and then

double-click the FILE value.

b. Type the new drive and path in the

String box, include the file name

 

[Bob Qin [MSFT]]

Our pleasure to work with you here Mark.

We look forward to helping you in the future.

Best regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.