How to Move Event Viewer Log Files to Another Location
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
How to back up and restore the registry in Windows
To move Event Viewer log files to another location on the hard disk, follow these steps:
1.Click Start, and then click Run.
2.In the Open box, type regedit, and then click OK.
3.Locate and click the following registry key:
4.Click the subkey that represents the event log that you want to move, for example, click Application.
5.In the right pane, double-click File.
6.Type the complete path to the new location (including the log file name) in the Value data box, and then click OK.
For example, if you want to move the application log (Appevent.evt) to the Eventlogs folder on the E drive, type e:\eventlogs\appevent.evt.
7.Repeat steps 4 through 6 for each log file that you want to move.
8.Click Exit on the Registry menu.
9.Restart the computer.
How to View the Name and the Location of Event Viewer Log Files
To view the name and the location of Event Viewer log files, follow these steps:
1.Click Start, point to Settings, and then click Control Panel.
2.Double-click Administrative Tools, and then double-click Event Viewer.
Alternatively, open the snap-in that contains Event Viewer.
3.Click to expand Event Viewer (if it is not already expanded).
4.Right-click the log that you want to view, and then click Properties.
5.Click the General tab.
The name and the location of the log file is displayed under Log name.