Event logs

[David Sherman]

Is there a way to extract all the event logs to an excel file?

thanks

 

[Andre Da Costa [Extended64]]

I am having issues logging into Vista 5365 right now, so I am going to base
this on XP. Open Control Panel > Administrative Tools > Event Viewer > (if
you don't see the Classic menus, press "Alt" on your keyboard and they
should appear. Click Action > Export List > (make sure the "Save as type:"
is "Text (Tab Delimited) (*.txt) > give it a File name: > save it to
somewhere such as your desktop. Got to your desktop > right click the file,
(I named mine "Event Viewer list") right click the file > click Open with >
Choose Program > under "Programs" > scroll down select Microsoft Excel > OK.

You can fix up the columns.
--
--
Andre
Windows Connected | http://www.windowsconnected.com
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta

 

[David Sherman]

Vista doesn't have export option.

I am having issues logging into Vista 5365 right now, so I am going to base
this on XP. Open Control Panel > Administrative Tools > Event Viewer > (if
you don't see the Classic menus, press "Alt" on your keyboard and they
should appear. Click Action > Export List > (make sure the "Save as type:"
is "Text (Tab Delimited) (*.txt) > give it a File name: > save it to
somewhere such as your desktop. Got to your desktop > right click the file,
(I named mine "Event Viewer list") right click the file > click Open with >
Choose Program > under "Programs" > scroll down select Microsoft Excel > OK.

You can fix up the columns.
--
--
Andre
Windows Connected | http://www.windowsconnected.com
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta

 

[David Sherman]

Here are the eveny log listed under the Windows event.


ADSI
AltTab
Backup
BITS-Client
CAPI2
CodeIntegrity
ComponentStore
CorruptedFilerecovery-Cleint
CorruptedFilerecovery-Server
DateTimeControlPanel
Diagnosis-DPS
Diagnosis-MSDT
Diagnosis-PLA
Diagnosis-WDI
Diagnosis-Networking
Diagnosis-Performance
DIMS – KeyRoam
DirectShow – Core
DriverFrameworks – UserMode
Dxskml
EFS
Event Collector
Eventlog
Firewall –CPL
GroupPolicy
Help
Hotstart
HTTPService
International
IPBusEnum
IPEC –SRV
Kernel – Boot Diagnosis
Kernel – ID
Kernel - Pnp
Kernel - Power
Kernel - Prefetch
Kernel - Process
Kernel - WDI
Kernel - WHEA
LDAP - Client
LUA
LuaFileVirturalization
MemoryDiagnostics – Results
MPS – Clnt
MPS – DRV
MPS – SRV
MSSHAV – SHA
NetworkAccessProtection
OCSetup
Powercfg
Powercpl
PrintSpooler
QOS – pacer
QOS – qwave
RemoteAssistance
Resources – Exhaustion – Detector
Resources – Exhaustion – Resolver
Resources – Leak Diagnostic
Resources Publication
Restart Manager
Service Report API
Services
Services – EMD
Services – svchost
Shell – AuthUI
Speech – User Experience
Stobject
Subsys –CSR
Subsys – Smss
Task Scheduler
Terminal Services –PNPDevices
Terminal services – Remote Connection Manager
Video-for-Windows
WindowsUpdateCient
Wininit
Winlogon
Winsock – AFD
Winsock – WS2help
Wireless – AutoConfig
WRP – Integrity – client
WSC – SRV
WUSA

 

[Andre Da Costa [Extended64]]

I see what you are saying, the option you are trying to accomplish is not
available when you select a folder. I will file a Suggestion/Wish on this.
--
--
Andre
Windows Connected | http://www.windowsconnected.com
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta

 

[David Sherman]

Thanks.

PS. Now I have to find out what all the unknown items are. Vista will
have a whole new learning curve to get around.