Is there a straightforward way to redirect the Event Viewer files from the Windows\System32\config folder to an alternate logical partition or network share? My platform is Windows XP Professional SP2.
There is indeed a way to change the default location for the Event Viewer's log files in Windows 2000, 2003 and XP. Note that you need to be logged in with an account that has administrative privileges to do this.
1. Open REGEDIT (or another Registry editor program) and navigate to the key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
2. Open the subkey that contains the event log you want to move. On most machines, you'll be able to choose between Application, Security and System.
3. Each key contains a value named File (type REG_EXPAND_SZ), which contains the pathname and filename to the log file. By default this is %SystemRoot%\system32\config\
4. Close the Registry and restart the computer.
Dig Deeper on Windows Server Monitoring and Administration
Related Q&A from Serdar Yegulalp, Contributor
Mulling over an upgrade to Windows Server 2012? You're bound to have some questions. Our expert answers the most common ones.continue reading
The more information you want about Hyper-V traffic, the harder it will be to get. Our expert explains why things will get better in Windows Server 8.continue reading
There are several potential reasons why your users’ Outlook passwords for Exchange are not being stored. Our expert examines the top four and their ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.