How to recover Windows Event Log

Asked By Horace M Dudley 20 points N/A Posted on - 03/11/2013

I am using Windows XP in my system and need a small technical clarification from my Techyv friends. Please explain me about how to recover Windows event log, also let me how whether it's possible to clear the event logs, if so how to do it. Finally, can we recover the event logs that were removed from the system. 

Thanks.

• Status: Open
• Question Views: 1649
• Answer Count: 2
• Vote Up 0 Vote Down

• Answer Accepted: Yes
• Question Category: Suggestions

Best Answer by Keith J Harmon

Go To Solution

Best Answer

Best Answer

Answered By Keith J Harmon 10 points N/A #167262

How to recover Windows Event Log

Dear Horace,

– In order to recover Windows Event Log, you need first to save the event logs to your desktop or you can restore event log from backups previously made by backup and recovery management software.

1. First I'll show you how to save event logs;

– Open the Event Viewer.

– Select the logs you want to save (You can save the whole Log).

Or you can select certain events to be saved.

You can save the log or the events in the following extensions;

– Log-file format (.evt /.evtx ), Text-file format (.txt), XML file (.xml) and Comma-delimited text-file format (.csv).

To open your previously saved events select Open Saved Log.

2. To restore event log from backups previously made by backup and recovery management software:

"Tivoli Storage Manager" from IBM: is a good backup and recovery management software and allows you to perform various actions regarding the restore process.

It provides a command line interface (CLI) that you can use as instead of the graphical user interface (GUI).

From the CLI you can recover the event log by using the command "restore eventlog" which will Restore Windows XP event logs from the Tivoli Storage Manager server.

Tivoli Storage Manager

Tivoli on Wikipedia

– It's possible to clear the event logs and here is how to do it:

1. Right Click on the log you want to clear and select "Clear log".

2. You will have the option to save it before you clear it or just clear the log.

 

3. Now it's clear.

About Keith J Harmon

Questions
9

Answers
61

Best Answers
23

• Vote Up 0 Vote Down

• Posted on - 03/12/2013
• Question Category: Suggestions

Answered By Peter A May 10 points N/A #167261

How to recover Windows Event Log

Are you getting “Event Viewer can’t open. Verify that the Event Log service is running. The data is invalid (13)….”? When you try to open the system log that’s time it will give you this error message. For this error you can get a brief description with images just follow these steps:

If you are facing this error then I think these steps will help you to fix it.

Best wishes for you.

About Peter A May

Questions
11

Answers
101

Best Answers
44

• Vote Up 0 Vote Down

• Posted on - 03/16/2013
• Question Category: Suggestions