.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I change the location of the event logs?
John Savill
March 4, 1999
1 Min Read
A. A. In event viewer you will notice that there are 3 different logs, Application, System and Security and each of these are mapped to a .EVT file in the %systemroot%/system32/config directory, however for performance/disk space reasons you may wish to move them and this can be done by performing the following
Start the Registry Editor (regedit.exe)
Move to the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLog key. Under this key are 3 other sub-keys, Application, Security and System. Select on of them
Under each of the sub-keys is a value called File, double click this value
Edit the value to the location you require and click OK
Repeat for the other 2 log settings
Close the registry editor and reboot the machine for the change to take effect
About the Author
You May Also Like
.png?width=700&auto=webp&quality=80&disable=upscale)