Event Log storage location - Network
Hello,
I was wondering if it was possible to to redirect the event logs to be stored on a network location in Server Standard 2003 R2 32 bit. I have tried editing the registry keys but as soon as I click off they key they revert back to the default config folder.
What permissions would I need on the Network folder? How do I get the registry key to stay?
Thanks in Advance.
April 22nd, 2011 3:41pm
I think that storing windows event logs on network location in not supported. And I do think it would be a good idea, in case of network failure how would windows wirte events to event log?
There are many program which will allow you to read event logs remotely, or you can use forwarded events which is built into WindowsWith kind regards
Krystian Zieja
http://www.projectnenvision.com
Follow me on twitter
My Blog
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2011 4:02pm
Hi,
You may refer to the following Microsoft KB article for how to change the default Event Viewer log file location. Considering stability as “Krystian.Zieja”
mentioned, network location is not a good option.
How to move Event Viewer log files to another location in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/kb/315417
The options “Krystian.Zieja” provided is the best methods. For the detailed steps, please refer to the following Microsoft TechNet articles:
Connect to another computer in Event Viewer
http://technet.microsoft.com/en-us/library/cc786582(WS.10).aspx
Event Subscriptions
http://technet.microsoft.com/en-us/library/cc749183.aspx
Configure Computers to Forward and Collect Events
http://technet.microsoft.com/en-us/library/cc748890.aspx
Create a New Subscription
http://technet.microsoft.com/en-us/library/cc722010.aspx
Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 25th, 2011 1:49am