5

Moving Windows event logs without corrupting them

view full story
linux-howto

http://serverfault.com – I need to retrieve the event logs from an XP embedded machine which doesn't have the Event Viewer, to an XP pro machine with the Event Viewer and then view the logs. Whenever I move an event log it seems to become corrupted and I get the message "Unable to complete the operation on SysEvent.evt. The event log file is corrupted." when I try to open it in Event Viewer. This happens even when the logs are from the same machine, and copied to the same folder as the rest of the logs, i.e. command line -> cd C:\Windows\system32\config -> copy SysEvent.evt SysEvent2.evt The original log o (HowTos)