Also take a look at the everyquery.vbs utility that comes with Windows XP and Windows 2003 in the C:\WINDOWS\system32 directory.
For usage info, run: cscript c:\windows\system32\eventquery.vbs /? Best regards, Andy Andy Raibeck IBM Software Group Tivoli Storage Manager Client Product Development Level 3 Team Lead Internal Notes e-mail: Andrew Raibeck/Tucson/[EMAIL PROTECTED] Internet e-mail: [EMAIL PROTECTED] IBM Tivoli Storage Manager support web page: http://www.ibm.com/software/sysmgmt/products/support/IBMTivoliStorageManager.html The only dumb question is the one that goes unasked. The command line is your friend. "Good enough" is the enemy of excellence. From: "Huebner,Andy,FORT WORTH,IT" <[EMAIL PROTECTED]> To: [email protected] Date: 11/18/2008 11:50 AM Subject: Re: Backup Windows Eventlog / Systemlog for 2 years In the Windows 2000 resource kit the tool is eventlog.pl. It dumps the log to a csv. Andy Huebner -----Original Message----- From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of Wanda Prather Sent: Tuesday, November 18, 2008 8:23 AM To: [email protected] Subject: Re: [ADSM-L] Backup Windows Eventlog / Systemlog for 2 years There is a Windows utility (unfortunately I forget the name; I think it's from one of the older Windows resource kits) that lets you extract the event log to a flat file. I'd run that every day, then have TSM archive the flat file and delete from the hard drive. On Tue, Nov 18, 2008 at 3:31 AM, Herrmann, Boris <[EMAIL PROTECTED]>wrote: > Hello all, > > today we got the request to daily backup the windows event and windows > system log and keep them for 2 years (from Windows 2003 Server). Is > there a way to do this with the TSM Client to only backup this part from > Systemstate / Systemservices and bound this to a special > ManagementClass? > > Any help is appreciate, > Boris > This e-mail (including any attachments) is confidential and may be legally privileged. If you are not an intended recipient or an authorized representative of an intended recipient, you are prohibited from using, copying or distributing the information in this e-mail or its attachments. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete all copies of this message and any attachments. Thank you.
