A good tool called EventCombMT.exe in the Windows Server 2003 Resource Kit or Account Lockout and Management Tools may help network administrators to export specific kinds of event logs to a single text file.
Log files may be overwritten and need to be backed up, and the powerful tools such as MOM 2005 are too expensive for smallbusinesses. EventCombMT.exe acts as a simple free tool to help administrators in small businesses to export their specific event logs to a central location in a text file.
Let's start EventCombMT.exe, its main interface is shown in Figure 1. If we are not in a domain environment, it may pops up a dialog box mentions it cannot find the domain controller.
Figure 1
Right click on “Select To Search / Right Click To Add“ box, then select “Add Single Server“ (Figure 2). We can also add other kinds of servers. In this case, we use single server for an example.
Figure 2
Enter the server name or click “Browse“ to browse the server list. Then click “Add Server“ (Figure 3).
Figure 3
Then let's choose the types of log files to search. For example, system logs, as shown in Figure 4.
Figure 4
Then we need to choose the event types, like warnings, errors, etc. (Figure 5).
Figure 5
We should also input a range of event IDs it will search in. For example, to search events from ID 1 to 800. Figure 6 shows that.
Figure 6
We could also select a specific event sourse. Then let's click “Search”, it will generate a log file and export the logs meet our requirements to another text file. Figure 7 shows this.
Figure 7
Figure 8 and Figure 9 show the information included in the text files.
Figure 8
Figure 9