need to concate evt log file backups

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I've tried to script the concatenation using ado.stream, down to a simple
"copy /b *.evt out/evt" command. However, it appears that both EventViewer
and LogParser 2.2 don't see anything past the first concatenated file. It's
almost like during the binary concatenation there is an artifact that gets
introduced that appears to be some sort of the EOS or endofsomething. Please
help.

My recommendation to client is to scrap the reporting tool that creates
reports against evt files and create own reports with logparser, but client
wishes to use legacy tool and needs to run aggregate queries against more
than the single day backup evt. Hence, the need to concat the months worth
of evt files. Thanks.
 
Adam Cox said:
I've tried to script the concatenation using ado.stream, down to a simple
"copy /b *.evt out/evt" command. However, it appears that both EventViewer
and LogParser 2.2 don't see anything past the first concatenated file. It's
almost like during the binary concatenation there is an artifact that gets
introduced that appears to be some sort of the EOS or endofsomething. Please
help.

My recommendation to client is to scrap the reporting tool that creates
reports against evt files and create own reports with logparser, but client
wishes to use legacy tool and needs to run aggregate queries against more
than the single day backup evt. Hence, the need to concat the months worth
of evt files. Thanks.
Click to expand...

I suggest you make your event logger file large enough so
that it can hold one month's worth of events.
 
Back
Top