Also take a look at the everyquery.vbs utility that comes with Windows XP
and Windows 2003 in the C:\WINDOWS\system32 directory.

For usage info, run:

cscript c:\windows\system32\eventquery.vbs /?

Best regards,

Andy

Andy Raibeck
IBM Software Group
Tivoli Storage Manager Client Product Development
Level 3 Team Lead
Internal Notes e-mail: Andrew Raibeck/Tucson/IBM@IBMUS
Internet e-mail: storman AT us.ibm DOT com

IBM Tivoli Storage Manager support web page:
http://www.ibm.com/software/sysmgmt/products/support/IBMTivoliStorageManager.html


The only dumb question is the one that goes unasked.
The command line is your friend.
"Good enough" is the enemy of excellence.



From:
"Huebner,Andy,FORT WORTH,IT" <Andy.Huebner AT ALCONLABS DOT COM>
To:
ADSM-L AT VM.MARIST DOT EDU
Date:
11/18/2008 11:50 AM
Subject:
Re: Backup Windows Eventlog / Systemlog for 2 years



In the Windows 2000 resource kit the tool is eventlog.pl.  It dumps the
log to a csv.

Andy Huebner
-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Wanda Prather
Sent: Tuesday, November 18, 2008 8:23 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: [ADSM-L] Backup Windows Eventlog / Systemlog for 2 years

There is a Windows utility (unfortunately I forget the name; I think it's
from one of the older Windows resource kits) that lets you extract the
event
log to a flat file.

I'd run that every day, then have TSM archive the flat file and delete
from
the hard drive.




On Tue, Nov 18, 2008 at 3:31 AM, Herrmann, Boris
<Boris.Herrmann AT arag DOT de>wrote:

> Hello all,
>
> today we got the request to daily backup the windows event and windows
> system log and keep them for 2 years (from Windows 2003 Server). Is
> there a way to do this with the TSM Client to only backup this part from
> Systemstate / Systemservices and bound this to a special
> ManagementClass?
>
> Any help is appreciate,
> Boris
>


This e-mail (including any attachments) is confidential and may be legally
privileged. If you are not an intended recipient or an authorized
representative of an intended recipient, you are prohibited from using,
copying or distributing the information in this e-mail or its attachments.
If you have received this e-mail in error, please notify the sender
immediately by return e-mail and delete all copies of this message and any
attachments.
Thank you.