ELSave is a tool to save and/or clear a NT event log.
ELSave is written by Jesper Lauritsen. The executable is in the public domain. Source code is
ELSave takes the following arguments:
||Server for which you want to save or clear the log.
||Save the log to a file with this name. Must be an absolute path to
a local file on the server specified with -s. If -F is not specified the log is not saved.
||Name of log to save or clear. Must be one of system, application or
security. Default is application.
||Write errors and warnings to the application event log. Default is
to write errors to stderr. This options is mostly useful when ELSave is run in the
background, like for example from the scheduler.
||Clears the log. If -C is not specified the log is not cleared.
Save the application log on \\serv1 to \\serv1\d$\application.log:
elsave -s \\serv1 -F d:\application.log
Save the system log on the local machine to d:\system.log and then
clear the log:
elsave -l system -F d:\system.log -C
Download current version of elsave.
The ELSave tool is distributed as a zip file containing ELSave.exe
(the tool) and ELSave.htm (this page). You do not have to install the tool - simply run it
from a command line.
You may also want to look at the other NT tools by Jesper.
||Now works on NT 4.0 post-SP3 lsa2 hotfix and later.
last canged 20. juli 1999