Microsoft Windows – How to Move Event Viewer Log Files

In an ideal world,you'd never care about Event Viewer. In an ideal world software and hardware would always work, always meet expectations, and there'd never be any need to try and figure out why things are happening the way they are.

In an ideal world we'd also be able to rely on the event viewer for clear and consistent information about what your system and all the applications running on it are experiencing.

Sadly, we do not live in an ideal world. Event viewer can be a source for excellent clues into system failures and behavior. It can also be a frustrating source of exactly nothing. But it's definitely a tool worth knowing about if you're running Windows NT, 2000 or XP.

To move Event Viewer log files to another location on the hard disk, follow these steps:

  1. Click Start, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Locate and click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
    1. Click the subkey that represents the event log that you want to move, for example, click Application.
    2. In the right pane, double-click File.
    3. Type the complete path to the new location (including the log file name) in the Value data box, and then click OK.For example, if you want to move the application log (Appevent.evt) to the Eventlogs folder on the E: drive, type:
    e:\eventlogs\appevent.evt
    1. Repeat steps 4 through 6 for each log file that you want to move.
    2. Click Exit on the Registry menu.
    3. Restart the computer.
    SOURCE

    LINK

    LANGUAGE
    ENGLISH