none
Can't seem to be able to relocate Windows event logs RRS feed

Answers

  • Actually the solution I came up with was to not only set the HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\File value to the path of the file, but also set HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Flags to 1.  The Flags value was not mentioned in the KB article but WES7 seems to require it in order to relocate event log files

    • Marked as answer by beemr007 Monday, May 16, 2011 4:49 PM
    Monday, May 16, 2011 4:49 PM

All replies

  • Hello,

    you can move event log files using Event Viewer itself:

     

    1. Click Start, Control Panel.
    2. Double-click System and Security and then click on Show Event Logs, under Administrative Tools

      Alternatively, open the snap-in that contains Event Viewer.
    3. Click to expand Event Viewer (if it is not already expanded).
    4. Right-click the log that you want to view, and then click Properties.
    5. Click the General tab. 

      You can change the name and the location of the log file in Log path.

     

    Monday, May 16, 2011 8:24 AM
  • Actually the solution I came up with was to not only set the HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\File value to the path of the file, but also set HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Flags to 1.  The Flags value was not mentioned in the KB article but WES7 seems to require it in order to relocate event log files

    • Marked as answer by beemr007 Monday, May 16, 2011 4:49 PM
    Monday, May 16, 2011 4:49 PM