Results 1 to 4 of 4

Thread: NT Audit Logs

  1. #1
    Senior Member Info Tech Geek's Avatar
    Join Date
    Jan 2003
    Vernon, CT

    NT Audit Logs

    I haven't done this in a while and I'm trying to figure out where I went wrong. I'm looking to save my current audit logs and create a new log in which NT will write the new entries to.

  2. #2
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    The Great White North
    I haven't done this in a while either, but I seem to remember that when you go to clear or delete the log, it will ask you if you want to save/back-up first. Like I said, it's been a while so you might want to test it on a log that you don't care if you lose.


  3. #3
    Join Date
    Oct 2002
    Yep, when you right click on the log you want to delete in the Event Viewer, a dialog box comes up asking if you want to save the current log before deletion. Just click yes, specify where, and clear.
    Have you filled out an ID-10-T or PEBKAK form lately?

  4. #4
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Just a little something to add...

    When you save logs on a NT box, you have to save them locally unless you change the format from .evt to .csv or .txt. For some reason, NT doesn't like you to save it to a network drive.

    If you are connecting to the event viewer of an NT box from a win2k box, then you can save the logs wherever you want. 2k doesn't care where you save the logs either.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts