system event log export

[rintintin]

Hi all,

is it possible to export the system event log by a command line (for exemple
export system event log at eatch logon and copy it on a server)

thx a lot for yoru help

 

[Guest]

You could try the following:
1. Go to the command prompt
2. type in cd \%systemroot%\system32\config /d then press enter
3. type in COPY sysevent.evt [destination folder] (example copy sysevent.evt
"c:\My Documents") then press enter

File Names for Event Logs
Application = appevent.evt
Security = secevent.evt
System = sysevent.evt