How to recover Windows Event Log

Asked By 20 points N/A Posted on -
qa-featured

I am using Windows XP in my system and need a small technical clarification from my Techyv friends. Please explain me about how to recover Windows event log, also let me how whether it's possible to clear the event logs, if so how to do it. Finally, can we recover the event logs that were removed from the system. 

Thanks.

SHARE
Best Answer by Keith J Harmon
Best Answer
Best Answer
Answered By 10 points N/A #167262

How to recover Windows Event Log

qa-featured

Dear Horace,

– In order to recover Windows Event Log, you need first to save the event logs to your desktop or you can restore event log from backups previously made by backup and recovery management software.

1. First I'll show you how to save event logs;

– Open the Event Viewer.

– Select the logs you want to save (You can save the whole Log).

Event Logger

Or you can select certain events to be saved.

select certain events to be saved

You can save the log or the events in the following extensions;

– Log-file format (.evt /.evtx ), Text-file format (.txt), XML file (.xml) and Comma-delimited text-file format (.csv).

Log-file format (.evt /.evtx ), Text-file format (.txt), XML file (.xml) and Comma-delimited text-file format

To open your previously saved events select Open Saved Log.

previously saved events select Open Saved Log

2. To restore event log from backups previously made by backup and recovery management software:

"Tivoli Storage Manager" from IBM: is a good backup and recovery management software and allows you to perform various actions regarding the restore process.

It provides a command line interface (CLI) that you can use as instead of the graphical user interface (GUI).

From the CLI you can recover the event log by using the command "restore eventlog" which will Restore Windows XP event logs from the Tivoli Storage Manager server.

Tivoli Storage Manager

Tivoli on Wikipedia

– It's possible to clear the event logs and here is how to do it:

1. Right Click on the log you want to clear and select "Clear log".

Right Click on the log you want to clear

2. You will have the option to save it before you clear it or just clear the log.

 Event Viewer

3. Now it's clear.

Event Viewer log
Answered By 10 points N/A #167261

How to recover Windows Event Log

qa-featured

Are you getting “Event Viewer can’t open. Verify that the Event Log service is running. The data is invalid (13)….”? When you try to open the system log that’s time it will give you this error message. For this error you can get a brief description with images just follow these steps:

Computer Management Clear log System Save log before clear Broken Error log

Computer Management
If you are facing this error then I think these steps will help you to fix it.

Best wishes for you.

Login/Register to Answer

Related Questions