Guest LSB Posted September 6, 2007 Posted September 6, 2007 Hi All, Is there any possibility that I can retrieve the past event log from the event viewer that already been deleted? Whether can this be retrieved from the hardware or software level? Thanks in advance.
Guest Pegasus \(MVP\) Posted September 6, 2007 Posted September 6, 2007 Re: Event Log "LSB" <seokbee.lim@gmail.com> wrote in message news:4767C6E5-032D-4855-BBB8-EC3082764079@microsoft.com... > Hi All, > > Is there any possibility that I can retrieve the past event log from the > event viewer that already been deleted? Whether can this be retrieved from > the hardware or software level? > > Thanks in advance. > The event logger is a circular store. Old events don't get deleted, they get overwritten. You have to restore the old version of your event log files (*.evt) from your backup.
Recommended Posts