JSI Tip 0491 - How can I relocate the event logs?

By default, the event logs are stored in the %SystemRoot%\System32\Config folder. You can alter the location and/or file name by editing:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog

Double click this key to display the 3 log sub-keys. Select the log you wish to relocate and in the right hand pane, double click the File value which is a type REG_EXPAND_SZ. Change this string to the full path of the new location/name.

I suggest that you reboot.

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish