|
Save Event Log As File
To save current event log into event log file, select File->Save
Log As -> Save Event Log (backup) from the main menu or click  .
To backup unopened event log, browse for the log in the computers tree, click
right mouse button on it and select Save Log As
from the drop-down menu.
By default Windows Event Log service doesn't allow backups across the network.
It means that if you need to backup System log on \\Server, you can only backup
it to \\Server.
When you backup event logs with Event Log Explorer, you can save logs to any
computer across the net. In this case Event Log Explorer will backup event log
locally to Windows\Temp folder, and move the backup file to the target computer.
You can save/export certain events from event log to .evt file. To do so, select
File->Save Log As -> Save Displayed Events
or File->Save Log As -> Save Selected Events
from the main menu to create a new .evt files from the current event log view
or currently selected events.
Automatic Event Log Backup
Event Log Explorer helps you to automatically back up event logs. To do so,
open Event Log Properties dialog (File->Log
Properties for the current event log) and enable option: Backup
log automatically, then clear it. When this option is enabled and the
event log size reaches Maximum log size value,
Windows Event Log service will automatically save the log into Windows\system32\config\,
and clear the log. The name of the backup file is a concatenation of the log
file name and the date and time (in coordinated universal time, or UTC). The
name has this format:
LogName-year-month-day-hour-minute-seconds-millisecond.evt
You must make sure to move or delete the backup log files from the System volume.
If you do not, the volume may become full.
You can find extra information about auto auto-archiving at Microsoft's
website
|
