Event Log Not Saving on Local Machine After Use Over Network

[Guest jregan5]

We have 4 computers networked together and must perform weekly audits on

them. Typically we use the event viewer to review the events, then clear the

event log and save it to a file. Recently we've started doing this task for

all 4 machines over the network from a single computer. What's happening,

however, is that after clearing the log on the local machine, the file isn't

saved - we're asked to save, but the file seems to disappear. Can anyone shed

some light on this?

[Guest Gerry]

Re: Event Log Not Saving on Local Machine After Use Over Network

 

Is it going somewhere unexpected?

 

Go to Start, Control Panel, Folder Options, View, Advanced Settings and

verify that the box before "Show hidden files and folders" is checked

and "Hide protected operating system files " is unchecked. You may need

to scroll down to see the second item. You should also make certain that

the box before "Hide extensions for known file types" is not checked.

Next in Windows Explorer make sure View, Details is selected and then

select View, Choose Details and check before Name, Type, Total Size, and

Free Space.

 

You can then search for the three files in C:\WINDOWS\system32\config.

However, I am not sure whether when you save a copy it places the copy

there or somewhere else. The process of archiving logs is described

here:

http://support.microsoft.com:80/default.aspx?scid=kb;en-us;308427&Product=winxp

 

The value of saving old log files is open to question? What might you

use them for? Event Viewer is a diagnostic tool, which records current

errors. You resolve the problem and the error reports stop. Often an

error occurs and the user restarts the computer. The error is resolved,

perhaps never to occur again.

 

 

--

 

 

 

Hope this helps.

 

Gerry

~~~~

FCA

Stourport, England

Enquire, plan and execute

~~~~~~~~~~~~~~~~~~~

 

 

jregan5 wrote:

> We have 4 computers networked together and must perform weekly audits

> on them. Typically we use the event viewer to review the events, then

> clear the event log and save it to a file. Recently we've started

> doing this task for all 4 machines over the network from a single

> computer. What's happening, however, is that after clearing the log

> on the local machine, the file isn't saved - we're asked to save, but

> the file seems to disappear. Can anyone shed some light on this?