EventSave

This software was developed with largest care. However, the author can not guarantee that it runs under each version of Windows on each computer flawlessly. There is no warranty for the program, to the extent permitted by applicable law. The copyright holder provides the program "as is" without warranty of any kind.

Availability	Freeware
Current Version	6.4
Last Change	11. December 2009
Size (zipped)	60.878 Byte
Compatibility	Windows NT 4 Windows 2000 Windows XP Windows 2003 Windows Vista (and higher) as client - possible, but not recommended Windows Vista (and higher) as host - neither recommended nor supported
Description	There is no utility delivered with Windows NT to move the events from the current logs into backup files. I wrote a small tool that can be used to schedule a job to automatically save all events to another file and clear each log afterwards. Independently of how often you run it, there will be one file created every month for each log, called year_month_computer_xxx.evt, where xxx is the name of the log (like, for instance, Security or System). Example: The system log from a computer called UFO saved during May 2003 will be named 2003_05_UFO_System.evt. If the System log contains events from earlier months while EventSave does run, the log will be split into several files, each one containing only the events of one month. If EventSave is run again later during May 2003, all new System events will be added to the file 2003_05_UFO_System.evt The option /A does allow to save the logs of the entire domain with one command! The option /CUFO does allow to save all logs of the machine UFO, which can be in any domain where you have the necessary access rights. New since Version 6.2: Since version 6.2 EventSave does only collect and clear events from machines running Windows version 4 and 5 (NT 4 through Windows 2003) by default. The reason for this default behaviour is described in the FAQ B12 as well as in the readme file. With the option /V6 you can force EventSave to collect and clear events from machines running Windows version 6 or above (Vista and later), too. The collection of useful tools Report Event for Windows contains three variations of EventSave: EventCopy and ECA only copy one or more event logs, but do not clear them. EventSave+ works like EventSave, but allows you to select the event log types which you want to save and clear.

Further details regarding the program you will find within the attached file Readme.pdf.