| ELSave |
ELSave is a tool to save and/or clear a NT event log.
ELSave is written by Jesper Lauritsen. The executable is in the public domain. Source code is not available.
Arguments |
(top) |
ELSave takes the following arguments:
| -s \\server | Server for which you want to save or clear the log. |
| -F file | Save the log to a file with this name. Must be an absolute path to a local file on the server specified with -s. If -F is not specified the log is not saved. |
| -l log | Name of log to save or clear. Must be one of system, application or security. Default is application. |
| -q | Write errors and warnings to the application event log. Default is to write errors to stderr. This options is mostly useful when ELSave is run in the background, like for example from the scheduler. |
| -C | Clears the log. If -C is not specified the log is not cleared. |
Examples |
(top) |
Save the application log on \\serv1 to \\serv1\d$\application.log:
elsave -s \\serv1 -F d:\application.log
Save the system log on the local machine to d:\system.log and then clear the log:
elsave -l system -F d:\system.log -C
Download and installation |
(top) |
Download current version of elsave.
The ELSave tool is distributed as a zip file containing ELSave.exe (the tool) and ELSave.htm (this page). You do not have to install the tool - simply run it from a command line.
You may also want to look at the other NT tools by Jesper.
Version history |
(top) |
| version | |
| 0.4 | Now works on NT 4.0 post-SP3 lsa2 hotfix and later. |
last canged 07. september 1998