Windows XP event viewer

[Beerbaron]

I can view the event logs through Computer Management but is there some other way to view individual logs or are they saved in the registry?

Thanks.

 

[chaosophy]

They are stored in "C:\Windows\System32\config" but as to how you could read them not sure as you're always going to need software that can read the format, either event viewer or a 3rd party replacement, I would think.

You can save them from event viewer though to different formats and then read them that way but obviously this wouldn't be reading the 'live' events. You might be able to script something using WMI if that allows access to them but I guess it depends exactly what you are trying to achieve.

 

[Beerbaron]

The .evt files located "C:\Windows\System32\config" can be opened using eventvwer.exe located in "C:\Windows\System32"

As the log is text i just wondered where they were stored and if there was a different way to access them but you have made a good point in that it wouldnt be a live log.

Looks like the log is stored in the registry

All the application event logs messages DLLs are defined under the following registry keys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\ Application

Are all of Windows XPs logs stored in the registry?