saving event log to remote machine?

Discussion in 'MCSA' started by David, Nov 16, 2006.

  1. David

    David Guest

    I had read that you were only supposed to be able to save event logs (.evt
    format) to the local hard drive. However I was just able to save to remote
    machine using mapped drive and a UNC path? This was done from windows server
    2k3 sp1. Maybe this change was with sp1? anyone know?

    I also cross-posted to the cert groups because I was wondering how to handle
    this type of thing on a test... for example, book says you can't, hands on
    testing says you can....
    David, Nov 16, 2006
    #1
    1. Advertising

  2. David

    Bill Frisbee Guest

    David,

    The Windows Resource Kit has a tool called elogdump which does this, but
    PsLogList does this just fine.

    http://www.microsoft.com/technet/sysinternals/Security/PsLogList.mspx

    Either one works fine.

    Bill F.

    "David" <> wrote in message
    news:%23mL$...
    >I had read that you were only supposed to be able to save event logs (.evt
    >format) to the local hard drive. However I was just able to save to remote
    >machine using mapped drive and a UNC path? This was done from windows
    >server 2k3 sp1. Maybe this change was with sp1? anyone know?
    >
    > I also cross-posted to the cert groups because I was wondering how to
    > handle this type of thing on a test... for example, book says you can't,
    > hands on testing says you can....
    >
    Bill Frisbee, Nov 17, 2006
    #2
    1. Advertising

  3. "David" <> wrote in message
    news:%23mL$...
    >I had read that you were only supposed to be able to save event logs (.evt
    >format) to the local hard drive. However I was just able to save to remote
    >machine using mapped drive and a UNC path? This was done from windows
    >server 2k3 sp1. Maybe this change was with sp1? anyone know?
    >
    > I also cross-posted to the cert groups because I was wondering how to
    > handle this type of thing on a test... for example, book says you can't,
    > hands on testing says you can....


    I believe you've always been able to *export* / save the event log file to a
    network drive.

    I would expect the cert question would be asking whether you can permanently
    *move* the location of the original log file to a network drive, which you
    should not be able to do.


    --
    kind regards,
    Karl Levinson, MS MVP
    Security FAQ site:
    http://securityadmin.info
    Karl Levinson, mvp, Nov 20, 2006
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Peter Sale
    Replies:
    1
    Views:
    11,928
    Robin Walker
    Dec 11, 2004
  2. Ted Jones
    Replies:
    1
    Views:
    3,148
    old jon
    Aug 29, 2005
  3. Jack
    Replies:
    1
    Views:
    499
    voipguy
    Feb 22, 2005
  4. David
    Replies:
    2
    Views:
    780
    Karl Levinson, mvp
    Nov 20, 2006
  5. =?Utf-8?B?Q2FybG9z?=

    Event ID 7026 error in event viewer

    =?Utf-8?B?Q2FybG9z?=, Apr 25, 2007, in forum: Windows 64bit
    Replies:
    6
    Views:
    13,377
    =?Utf-8?B?Q2FybG9z?=
    Apr 27, 2007
Loading...

Share This Page