locked
Corrupt EVT File RRS feed

  • Question

  • User531388329 posted
    I have an EVT file from a computer that ran out of drive space in the middle of a write or something like that.  When I try to open it in the Event Log Viewer or parse it with logparser, it says that the file is corrupt and refuses to continue through the file.  Is there any way to force logparser to skip over errors and to continue parsing the information so I can extract as much readable info as possible?  I was using a hex editor and comparing the corrupt event log to a good one and hacking away at it without success. 
    Tuesday, August 21, 2007 2:20 AM

All replies

  • User531388329 posted
    Unfortunately, Log Parser uses the same API's used by Event Viewer, so if Log Parser gets an error from the API's, there's very little that can be done......sorry about that!
    Thursday, November 11, 2004 4:27 PM