event logs : is there a way to save them remotely?

  • Thread starter Thread starter JAQK
  • Start date Start date
J

JAQK

Win2k/2k3 domain

We'd like to save/copy the event logs remotely to a central location. Is
there a way to do this natively with Windows servers, thru registry/GPO, or
is there a third party tool available?

Thanks.
 
Miha said:
Hi,

These scripts should help you out,

Event Logs
http://www.microsoft.com/technet/scriptcenter/scripts/logs/eventlog/default.mspx

Look under Back Up and Clear an Event Log.

Replace . in strComputer = "."
with name of computer that you would like to manage.

I hope it helps you out,
Click to expand...

There is an inherent problem with using WMI/VBS to backup logs and it is
that a design problem exists with how the API backs up the file. If the
file is too large (I've seen cases of 80 meg files having problems) the
error code you get back traces back to a "not enough resources" to copy
the file. What it is trying to do that causes an 80 meg file to not be
backed up when the system has more than 100 megs of free RAM is beyond me.

Also, their "large file" backup script is worthless as all it does is
*check* to see how large a file is but the script does *exactly* the
same thing as if the file was not as large as their script tests for.
They only add an extra line into the script to clear the file afterwards
but it does nothing to help backing up a file that is larger than the
limit that I talk about in the first paragraph.
 
Back
Top