A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Customizing Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Application, Security and System log files - where are they located



 
 
Thread Tools Display Modes
  #1  
Old February 4th 09, 05:18 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually cleaning these log files and unless there is
a simpler method, I would like to create a BATCH file program to delete the
individual files that are created. Unfortunately, I do not know how or
where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any log
files there.

I hope these logs are not integral to 'ntuser.dat' or 'NtUser.dat' or
'UsrClass.dat' or SOFTWARE or SYSTEM log files, because when I try to read
any of them a window opens and states: "The process cannot access the file
because it is being used by another process." That being said, the
SYSTEM.LOG is located in the C:\WINDOWS\system32\config directory and its
'date modified' time stamp corresponds to the most recent time that it was
modified.

I also find a SECURITY.LOG located in the C:\WINDOWS\system32\config\
directory, but the same window opens stating that "The process cannot access
the file because it is being used by another process." Regardless, I doubt
this is the System log found under Event Viewer because the time associated
'date modified' does not correspond to the most recent time it was modified.

Does anyone know how and where I can find the files associated with Event
Viewer's Application, Security and System log files???

Thanks in advance,

AnnaMarie

Ads
  #2  
Old February 4th 09, 05:22 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

REVISED SLIGHTLY . . .

Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually clearing these log files and unless there is
a simpler method, I would like to create a BATCH file program to delete the
individual files that are created. Unfortunately, I do not know how or
where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any log
files there.

I hope these logs are not integral to 'ntuser.dat' or 'NtUser.dat' or
'UsrClass.dat' or SOFTWARE or SYSTEM log files, because when I try to read
any of them a window opens and states: "The process cannot access the file
because it is being used by another process." That being said, the
SYSTEM.LOG is located in the C:\WINDOWS\system32\config\ directory and its
'date modified' time stamp corresponds to the most recent time that it was
modified.

I also find a SECURITY.LOG located in the C:\WINDOWS\system32\config\
directory, but the same window opens stating that "The process cannot access
the file because it is being used by another process." Regardless, I doubt
this is the System log found under Event Viewer because the time associated
'date modified' does not correspond to the most recent time it was modified.

Does anyone know how and where I can find the files associated with Event
Viewer's Application, Security and System log files???

Thanks in advance,

AnnaMarie

  #3  
Old February 4th 09, 05:22 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

REVISED SLIGHTLY . . .

Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually clearing these log files and unless there is
a simpler method, I would like to create a BATCH file program to delete the
individual files that are created. Unfortunately, I do not know how or
where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any log
files there.

I hope these logs are not integral to 'ntuser.dat' or 'NtUser.dat' or
'UsrClass.dat' or SOFTWARE or SYSTEM log files, because when I try to read
any of them a window opens and states: "The process cannot access the file
because it is being used by another process." That being said, the
SYSTEM.LOG is located in the C:\WINDOWS\system32\config\ directory and its
'date modified' time stamp corresponds to the most recent time that it was
modified.

I also find a SECURITY.LOG located in the C:\WINDOWS\system32\config\
directory, but the same window opens stating that "The process cannot access
the file because it is being used by another process." Regardless, I doubt
this is the System log found under Event Viewer because the time associated
'date modified' does not correspond to the most recent time it was modified.

Does anyone know how and where I can find the files associated with Event
Viewer's Application, Security and System log files???

Thanks in advance,

AnnaMarie

  #4  
Old February 4th 09, 05:57 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
JS
external usenet poster
 
Posts: 6,475
Default Application, Security and System log files - where are they located

How to view and manage event logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427
See the section titled:
"How to Set Log Size and Overwrite Options"

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/default...;EN-US;q172156
"The Event Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt)"

Fix Corrupt Event Log Files
http://www.tunexp.com/tips/maintain_...ent_log_files/

Script to clear the Security event log after backing it up:
http://www.winhelponline.com/article...ing-it-up.html

EventSave and EventSave+
http://www.heysoft.de/Frames/f_sw_es_en.htm
(allows you to select the event log types which you want to save and clear)

--
JS
http://www.pagestart.com


"AnnaMarie" wrote in message
...
Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually cleaning these log files and unless there
is a simpler method, I would like to create a BATCH file program to delete
the individual files that are created. Unfortunately, I do not know how
or where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any
log files there.

I hope these logs are not integral to 'ntuser.dat' or 'NtUser.dat' or
'UsrClass.dat' or SOFTWARE or SYSTEM log files, because when I try to read
any of them a window opens and states: "The process cannot access the file
because it is being used by another process." That being said, the
SYSTEM.LOG is located in the C:\WINDOWS\system32\config directory and its
'date modified' time stamp corresponds to the most recent time that it was
modified.

I also find a SECURITY.LOG located in the C:\WINDOWS\system32\config\
directory, but the same window opens stating that "The process cannot
access the file because it is being used by another process." Regardless,
I doubt this is the System log found under Event Viewer because the time
associated 'date modified' does not correspond to the most recent time it
was modified.

Does anyone know how and where I can find the files associated with Event
Viewer's Application, Security and System log files???

Thanks in advance,

AnnaMarie



  #5  
Old February 4th 09, 05:57 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
JS
external usenet poster
 
Posts: 6,475
Default Application, Security and System log files - where are they located

How to view and manage event logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427
See the section titled:
"How to Set Log Size and Overwrite Options"

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/default...;EN-US;q172156
"The Event Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt)"

Fix Corrupt Event Log Files
http://www.tunexp.com/tips/maintain_...ent_log_files/

Script to clear the Security event log after backing it up:
http://www.winhelponline.com/article...ing-it-up.html

EventSave and EventSave+
http://www.heysoft.de/Frames/f_sw_es_en.htm
(allows you to select the event log types which you want to save and clear)

--
JS
http://www.pagestart.com


"AnnaMarie" wrote in message
...
Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually cleaning these log files and unless there
is a simpler method, I would like to create a BATCH file program to delete
the individual files that are created. Unfortunately, I do not know how
or where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any
log files there.

I hope these logs are not integral to 'ntuser.dat' or 'NtUser.dat' or
'UsrClass.dat' or SOFTWARE or SYSTEM log files, because when I try to read
any of them a window opens and states: "The process cannot access the file
because it is being used by another process." That being said, the
SYSTEM.LOG is located in the C:\WINDOWS\system32\config directory and its
'date modified' time stamp corresponds to the most recent time that it was
modified.

I also find a SECURITY.LOG located in the C:\WINDOWS\system32\config\
directory, but the same window opens stating that "The process cannot
access the file because it is being used by another process." Regardless,
I doubt this is the System log found under Event Viewer because the time
associated 'date modified' does not correspond to the most recent time it
was modified.

Does anyone know how and where I can find the files associated with Event
Viewer's Application, Security and System log files???

Thanks in advance,

AnnaMarie



  #6  
Old February 4th 09, 07:50 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
Mort[_4_]
external usenet poster
 
Posts: 22
Default Application, Security and System log files - where are they located

On Tue, 3 Feb 2009 23:57:10 -0500, "JS" @ wrote:

How to view and manage event logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427
See the section titled:
"How to Set Log Size and Overwrite Options"

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/default...;EN-US;q172156
"The Event Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt)"

Fix Corrupt Event Log Files
http://www.tunexp.com/tips/maintain_...ent_log_files/

Script to clear the Security event log after backing it up:
http://www.winhelponline.com/article...ing-it-up.html

EventSave and EventSave+
http://www.heysoft.de/Frames/f_sw_es_en.htm
(allows you to select the event log types which you want to save and clear)

--
JS
http://www.pagestart.com


Not one of those links does what the OP wants to do. Not one even
helps.


"AnnaMarie" wrote in message
...
Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually cleaning these log files and unless there
is a simpler method, I would like to create a BATCH file program to delete
the individual files that are created. Unfortunately, I do not know how
or where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any
log files there.

  #7  
Old February 4th 09, 07:50 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
Mort[_4_]
external usenet poster
 
Posts: 22
Default Application, Security and System log files - where are they located

On Tue, 3 Feb 2009 23:57:10 -0500, "JS" @ wrote:

How to view and manage event logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427
See the section titled:
"How to Set Log Size and Overwrite Options"

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/default...;EN-US;q172156
"The Event Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt)"

Fix Corrupt Event Log Files
http://www.tunexp.com/tips/maintain_...ent_log_files/

Script to clear the Security event log after backing it up:
http://www.winhelponline.com/article...ing-it-up.html

EventSave and EventSave+
http://www.heysoft.de/Frames/f_sw_es_en.htm
(allows you to select the event log types which you want to save and clear)

--
JS
http://www.pagestart.com


Not one of those links does what the OP wants to do. Not one even
helps.


"AnnaMarie" wrote in message
...
Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually cleaning these log files and unless there
is a simpler method, I would like to create a BATCH file program to delete
the individual files that are created. Unfortunately, I do not know how
or where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any
log files there.

  #8  
Old February 4th 09, 11:46 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

Thanks for your reply, JS.

I want to also thank you for sharing your suggestions, one of which provided
me with the ANSWER to my QUESTION . . . Does anyone know how and where I can
find the files associated with Event Viewer's Application, Security and
System log files???

The ANSWER is, of course, the C:\WINDOWS\system32\config\ directory - where
we find . . .

C:\WINDOWS\system32\config\AppEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

Prior to investigating the links provided in your reply, I . . .
- cleared each Event Log file
- copied each .Evt file to a new directory on my F:\ drive
- and created the following batch file . . .

COPY F:\Event_Viewer_LOG_Files\AppEvent.Evt
C:\WINDOWS\system32\config\AppEvent.Evt
COPY F:\Event_Viewer_LOG_Files\SecEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
COPY F:\Event_Viewer_LOG_Files\SysEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

It did not work. To find why, I opened a CMD PROMPT window and discovered
the following . . .

C:\COPY F:\Event_Viewer_LOG_Files\AppEvent.Evt
C:\WINDOWS\system32\config\AppEvent.Evt

The process cannot access the file because it is being used by another
process.
0 file(s) copied.

C:\

Having failed, I investigated the contents of each of your suggested links
and my results and or conclusions are as follows . . .

http://support.microsoft.com/default...;EN-US;q172156 states . . .

The Event Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt) are
always in use by the system, preventing the files from being deleted or
renamed. The EventLog service cannot be stopped because it is required by
other services, thus the files are always open. This article describes a
method to rename or move these files for troubleshooting purposes.

NTFS Partition method

Click the Start button, point to Settings, click Control Panel, and then
double-click Services.
Select the EventLog service and click Startup. Change the Startup Type to
Disabled, and then click OK. If you are unable to log on to the computer but
can access the registry remotely, you can change the Startup value in the
following registry key to 0x4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog
Restart Windows.

NOTE: When the system starts up, several services may fail; a message
informing the user to use Event Viewer to review errors may appear.
Rename or move the corrupt *.evt file from the following location:
%SystemRoot%\System32\Config
In Control Panel Services tool, re-enable the EventLog service by setting it
back to the default of Automatic startup, or change the registry Startup
value back to 0x2.

.. . . far too destructive and requires far more work than what I am
currently doing - manually clearing each LOG file's entries. However, it
gave me another batch file idea as follows . . .

sc stop Eventlog
sc config Eventlog start= disabled
sc config Eventlog start= auto
sc start Eventlog

It did not work. To find why, I opened a CMD PROMPT window and discovered
the following . . .

C:\sc stop Eventlog
[SC] ControlService FAILED 1052:

The requested control is not valid for this service.

C:\

To confirm that the "sc stop Eventlog" command was working I executed the
following command line syntax . . .

C:\sc config Eventlog start= disabled
[SC] ChangeServiceConfig SUCCESS

C:\COPY F:\Event_Viewer_LOG_Files\AppEvent.Evt
C:\WINDOWS\system32\config\AppEvent.Evt

The process cannot access the file because it is being used by another
process.
0 file(s) copied.

C:\

While I did confirm the command line syntax was working properly, this idea
failed. Accordingly, I furthered my investigation associated with the
contents of your remaining links and my results and or conclusions are as
follows . . .

http://support.microsoft.com/kb/308427 states (among other non-applicable
instructions) . . .

How to Filter Log Events
To filter log events, follow these steps:
Click Start, and then click Control Panel. Click Performance and
Maintenance, then click Administrative Tools, and then double-click Computer
Management. Or, open the MMC containing the Event Viewer snap-in.
In the console tree, expand Event Viewer, and then click the log that
contains the event that you want to view.
On the View menu, click Filter.
Click the Filter tab (if it is not already selected).
Specify the filter options that you want, and then click OK.
Only events that match your filter criteria are displayed in the details
pane.
To return the view to display all log entries, click Filter on the View
menu, and then click Restore Defaults.


.. . . this procedure gave me another new idea. How do create a batch file
that UNCHECKS the FILTERS for ALL Event types, something I do not have a
clue how to accomplish. Unfortunately, this new idea turned out to be a
poor one. Poor, because when I tried this manually, while it did filter the
event logs as long as I stayed in MMC, but it did nothing to the actual LOG
files [i.e. Appevent.evt, Secevent.evt and Sysevent.evt]. Otherwise, once
again, it did not provide a simpler solution than what I am currently
doing - manually clearing each LOG file's entries.

http://www.tunexp.com/tips/maintain_...ent_log_files/
states . . .

Fix Corrupt Event Log Files

One of the administrative tools in Microsoft Management Console, Event
Viewer maintains logs about program, security, and system events on your
computer. You can use Event Viewer to view and manage the event logs, gather
information about hardware and software problems, and monitor Windows
security events.

If Event Viewer reports on startup that one or more of your log files is
corrupt, you can remedy the situation as follows:
Open the Event Viewer.
Rightclick on the corrupt log in the left pane and click Properties.
Click the Clear button in the Properties dialog box.

You cannot delete or rename the log files while the Event Log service is
running.

.. . . which only provides instructions to accomplish exactly what I am
currently doing - manually clearing each LOG file's entries.

In conclusion, I want to thank you again for helping to ANSWER my QUESTION
which identified where the files associated with Event Viewer's Application,
Security and System logs were located:


C:\WINDOWS\system32\config\AppEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

Unfortunately, after reviewing your suggested links, I was unable to resolve
my other goal of creating a BATCH file program to delete the individual
files that are created. Given the various system responses including, but
not limited to, "The process cannot access the file because it is being used
by another process" as well as the Microsoft article that states, "The Event
Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt) are always in
use by the system, preventing the files from being deleted or renamed," it
appears that my goal may never be achieved.

Thanks again, JS.

  #9  
Old February 4th 09, 11:46 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

Thanks for your reply, JS.

I want to also thank you for sharing your suggestions, one of which provided
me with the ANSWER to my QUESTION . . . Does anyone know how and where I can
find the files associated with Event Viewer's Application, Security and
System log files???

The ANSWER is, of course, the C:\WINDOWS\system32\config\ directory - where
we find . . .

C:\WINDOWS\system32\config\AppEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

Prior to investigating the links provided in your reply, I . . .
- cleared each Event Log file
- copied each .Evt file to a new directory on my F:\ drive
- and created the following batch file . . .

COPY F:\Event_Viewer_LOG_Files\AppEvent.Evt
C:\WINDOWS\system32\config\AppEvent.Evt
COPY F:\Event_Viewer_LOG_Files\SecEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
COPY F:\Event_Viewer_LOG_Files\SysEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

It did not work. To find why, I opened a CMD PROMPT window and discovered
the following . . .

C:\COPY F:\Event_Viewer_LOG_Files\AppEvent.Evt
C:\WINDOWS\system32\config\AppEvent.Evt

The process cannot access the file because it is being used by another
process.
0 file(s) copied.

C:\

Having failed, I investigated the contents of each of your suggested links
and my results and or conclusions are as follows . . .

http://support.microsoft.com/default...;EN-US;q172156 states . . .

The Event Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt) are
always in use by the system, preventing the files from being deleted or
renamed. The EventLog service cannot be stopped because it is required by
other services, thus the files are always open. This article describes a
method to rename or move these files for troubleshooting purposes.

NTFS Partition method

Click the Start button, point to Settings, click Control Panel, and then
double-click Services.
Select the EventLog service and click Startup. Change the Startup Type to
Disabled, and then click OK. If you are unable to log on to the computer but
can access the registry remotely, you can change the Startup value in the
following registry key to 0x4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog
Restart Windows.

NOTE: When the system starts up, several services may fail; a message
informing the user to use Event Viewer to review errors may appear.
Rename or move the corrupt *.evt file from the following location:
%SystemRoot%\System32\Config
In Control Panel Services tool, re-enable the EventLog service by setting it
back to the default of Automatic startup, or change the registry Startup
value back to 0x2.

.. . . far too destructive and requires far more work than what I am
currently doing - manually clearing each LOG file's entries. However, it
gave me another batch file idea as follows . . .

sc stop Eventlog
sc config Eventlog start= disabled
sc config Eventlog start= auto
sc start Eventlog

It did not work. To find why, I opened a CMD PROMPT window and discovered
the following . . .

C:\sc stop Eventlog
[SC] ControlService FAILED 1052:

The requested control is not valid for this service.

C:\

To confirm that the "sc stop Eventlog" command was working I executed the
following command line syntax . . .

C:\sc config Eventlog start= disabled
[SC] ChangeServiceConfig SUCCESS

C:\COPY F:\Event_Viewer_LOG_Files\AppEvent.Evt
C:\WINDOWS\system32\config\AppEvent.Evt

The process cannot access the file because it is being used by another
process.
0 file(s) copied.

C:\

While I did confirm the command line syntax was working properly, this idea
failed. Accordingly, I furthered my investigation associated with the
contents of your remaining links and my results and or conclusions are as
follows . . .

http://support.microsoft.com/kb/308427 states (among other non-applicable
instructions) . . .

How to Filter Log Events
To filter log events, follow these steps:
Click Start, and then click Control Panel. Click Performance and
Maintenance, then click Administrative Tools, and then double-click Computer
Management. Or, open the MMC containing the Event Viewer snap-in.
In the console tree, expand Event Viewer, and then click the log that
contains the event that you want to view.
On the View menu, click Filter.
Click the Filter tab (if it is not already selected).
Specify the filter options that you want, and then click OK.
Only events that match your filter criteria are displayed in the details
pane.
To return the view to display all log entries, click Filter on the View
menu, and then click Restore Defaults.


.. . . this procedure gave me another new idea. How do create a batch file
that UNCHECKS the FILTERS for ALL Event types, something I do not have a
clue how to accomplish. Unfortunately, this new idea turned out to be a
poor one. Poor, because when I tried this manually, while it did filter the
event logs as long as I stayed in MMC, but it did nothing to the actual LOG
files [i.e. Appevent.evt, Secevent.evt and Sysevent.evt]. Otherwise, once
again, it did not provide a simpler solution than what I am currently
doing - manually clearing each LOG file's entries.

http://www.tunexp.com/tips/maintain_...ent_log_files/
states . . .

Fix Corrupt Event Log Files

One of the administrative tools in Microsoft Management Console, Event
Viewer maintains logs about program, security, and system events on your
computer. You can use Event Viewer to view and manage the event logs, gather
information about hardware and software problems, and monitor Windows
security events.

If Event Viewer reports on startup that one or more of your log files is
corrupt, you can remedy the situation as follows:
Open the Event Viewer.
Rightclick on the corrupt log in the left pane and click Properties.
Click the Clear button in the Properties dialog box.

You cannot delete or rename the log files while the Event Log service is
running.

.. . . which only provides instructions to accomplish exactly what I am
currently doing - manually clearing each LOG file's entries.

In conclusion, I want to thank you again for helping to ANSWER my QUESTION
which identified where the files associated with Event Viewer's Application,
Security and System logs were located:


C:\WINDOWS\system32\config\AppEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

Unfortunately, after reviewing your suggested links, I was unable to resolve
my other goal of creating a BATCH file program to delete the individual
files that are created. Given the various system responses including, but
not limited to, "The process cannot access the file because it is being used
by another process" as well as the Microsoft article that states, "The Event
Viewer Log files (Sysevent.evt, Appevent.evt, Secevent.evt) are always in
use by the system, preventing the files from being deleted or renamed," it
appears that my goal may never be achieved.

Thanks again, JS.

  #10  
Old February 4th 09, 11:51 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located


"Mort" wrote in message
...

HUGE SNIP

Not one of those links does what the OP wants to do. Not one even
helps.


I do not know whom "OP" is, but if its ME, then, Mort, in general you may be
correct, however, specifically, JS posted reply did HELP answer my QUESTION
regarding where the files associated with Event Viewer's Application,
Security and System logs were located:

C:\WINDOWS\system32\config\AppEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

Unfortunately, after reviewing the contents associated with the suggested
links, I was unable to resolve my other goal of creating a BATCH file
program to delete the individual files that are created. Given the various
system responses including, but not limited to, "The process cannot access
the file because it is being used by another process" as well as the
Microsoft article that states, "The Event Viewer Log files (Sysevent.evt,
Appevent.evt, Secevent.evt) are always in use by the system, preventing the
files from being deleted or renamed," it appears that my goal may never be
achieved.

AnnaMarie

  #11  
Old February 4th 09, 11:51 AM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located


"Mort" wrote in message
...

HUGE SNIP

Not one of those links does what the OP wants to do. Not one even
helps.


I do not know whom "OP" is, but if its ME, then, Mort, in general you may be
correct, however, specifically, JS posted reply did HELP answer my QUESTION
regarding where the files associated with Event Viewer's Application,
Security and System logs were located:

C:\WINDOWS\system32\config\AppEvent.Evt
C:\WINDOWS\system32\config\SecEvent.Evt
C:\WINDOWS\system32\config\SysEvent.Evt

Unfortunately, after reviewing the contents associated with the suggested
links, I was unable to resolve my other goal of creating a BATCH file
program to delete the individual files that are created. Given the various
system responses including, but not limited to, "The process cannot access
the file because it is being used by another process" as well as the
Microsoft article that states, "The Event Viewer Log files (Sysevent.evt,
Appevent.evt, Secevent.evt) are always in use by the system, preventing the
files from being deleted or renamed," it appears that my goal may never be
achieved.

AnnaMarie

  #12  
Old February 4th 09, 01:36 PM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
Olórin[_2_]
external usenet poster
 
Posts: 917
Default Application, Security and System log files - where are they located

"AnnaMarie" wrote in message
...
REVISED SLIGHTLY . . .

Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually clearing these log files and unless there
is
a simpler method, I would like to create a BATCH file program to delete
the
individual files that are created. Unfortunately, I do not know how or
where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any
log
files there.

snip


AnnaMarie -

I can offer no help with getting you nearer a solution as posed than what
you've discovered for yourself, but can't help wondering why you feel the
need to inspect the logs every day. Is it a "just-in-case" maintenance
thing, or are you looking out for something in particular? Also, why the
need to clear them down every day? - they don't take up much disk space at
all....


  #13  
Old February 4th 09, 01:36 PM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
Olorin
external usenet poster
 
Posts: 323
Default Application, Security and System log files - where are they located


"AnnaMarie" wrote in message
...
REVISED SLIGHTLY . . .

Hi,

On a daily basis, under Administrative Tools / Event Viewer, I inspect the
Application, Security and System log files. When there are no problems, I
manually clear each log file.

I am getting tired of manually clearing these log files and unless there
is
a simpler method, I would like to create a BATCH file program to delete
the
individual files that are created. Unfortunately, I do not know how or
where they are written. According to its properties, Event Viewer is
located in %SystemRoot%\system32\ directory, however, I do not find any
log
files there.

snip


AnnaMarie -

I can offer no help with getting you nearer a solution as posed than what
you've discovered for yourself, but can't help wondering why you feel the
need to inspect the logs every day. Is it a "just-in-case" maintenance
thing, or are you looking out for something in particular? Also, why the
need to clear them down every day? - they don't take up much disk space at
all....


  #14  
Old February 4th 09, 02:42 PM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

Hello Olórin and thank you for your reply.

I can offer no help with getting you nearer a solution as posed than what
you've discovered for yourself, but can't help wondering why you feel the
need to inspect the logs every day. Is it a "just-in-case" maintenance
thing, or are you looking out for something in particular? Also, why the
need to clear them down every day? - they don't take up much disk space at
all....


It is indeed a simple preventive maintenance routine.

I update software programs and utilities on a regular basis (when
available - sometimes several times a week), and I also try new and or
interesting utilities from time to time. Accordingly, I like to know what
is happening behind the scene - so to speak.

This routine has served me well. It helps identify issues that are
generally germane that day, issues that often can be resolved quickly,
thereby ensuring that my system is running without obstruction and at peak
performance. In short, I am a "peak performance" nut. I am also a
consulting electrical engineer - another form of a nut.

Clearing them down each day, or after every use, helps ensure that, the next
time I power up, these logs files represent current, real-time events (not
yesterday's or last week's, month's, etc) and therefore are more quickly
resolved and or dismissed.

I also enjoy speeding up repetitive processes, ergo my interest in creating
batch files.

Thanks again!

AM

  #15  
Old February 4th 09, 02:42 PM posted to microsoft.public.windowsxp.general,microsoft.public.windowsxp.customize
AnnaMarie
external usenet poster
 
Posts: 63
Default Application, Security and System log files - where are they located

Hello Olórin and thank you for your reply.

I can offer no help with getting you nearer a solution as posed than what
you've discovered for yourself, but can't help wondering why you feel the
need to inspect the logs every day. Is it a "just-in-case" maintenance
thing, or are you looking out for something in particular? Also, why the
need to clear them down every day? - they don't take up much disk space at
all....


It is indeed a simple preventive maintenance routine.

I update software programs and utilities on a regular basis (when
available - sometimes several times a week), and I also try new and or
interesting utilities from time to time. Accordingly, I like to know what
is happening behind the scene - so to speak.

This routine has served me well. It helps identify issues that are
generally germane that day, issues that often can be resolved quickly,
thereby ensuring that my system is running without obstruction and at peak
performance. In short, I am a "peak performance" nut. I am also a
consulting electrical engineer - another form of a nut.

Clearing them down each day, or after every use, helps ensure that, the next
time I power up, these logs files represent current, real-time events (not
yesterday's or last week's, month's, etc) and therefore are more quickly
resolved and or dismissed.

I also enjoy speeding up repetitive processes, ergo my interest in creating
batch files.

Thanks again!

AM

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 10:36 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.