I have an environment where we have been requested to archive our event logs to a SAN unit. Is it possible to set the individual event logs to archive to a UNC path instead of a drive letter? (Event log forwarding is a possibility, but the collector will still need to archive to SAN. We are talking about ~500 servers.) Thanks, Alex PS: http://technet.microsoft.com/en-us/library/cc721981.aspx is close, but not quite what Im required to get. PPS: When 2008 was certified, we put in a note that our current solution did not work. SECURITY said nothing, and management let it drop until now.. when it's a crisis. (although quite frankly, it should have been one earlier as well.)

Maybe script can do it: http://social.technet.microsoft.com/Forums/en-US/ITCG/thread/089e0f98-3628-45a2-aa3e-cf7ca1667e1a

If you don’t want to use a script, can you map a drive first from your SAN and export the event using wevtutil? http://portal.sivarajan.com/2010/06/export-and-email-event-log-information.html You don’t have to manually map the drive, you use Net Use command in batch file or script. Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX Blogs - http://blogs.sivarajan.com/ Articles - http://www.sivarajan.com/publications.html Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara This posting is provided AS IS with no warranties,and confers no rights.