Microsoft PSS have a utility called EventCombMT to read multiple event logs. It also includes some useful filters (eg account lockout info).
Also, I've toyed with using a WMI and ADO pull the event logs into a SQL server and this works very nicely.
Is there a particular reason to keep the files in EVT format?




Reply With Quote