Event Viewer problem with save large log file

[Neit]

Hi All,
I have a problem with Event Viewer. I have message like:
“Event Viewer can only save up to 256 individually selected events. To save a larger amount of events, use filtering or custom views to define the events of interest, then save them using “Save Events As”.”
But I have already filtered list of events (more than 1600 records). How can I safe them all to the one file?
Thank you!

[Carley]

Hello as I don’t know much about this. But still I tried to search about this query on Google. And then I found the Microsoft site where I found this information. I think this will help you to solve your query. I am not sure but still I keep hope that this will help you. If you found any useful and appropriate solution then please share it here. Please go through it.
http://support.microsoft.com/kb/957414

[Neit]

Thank you Carley,
In details :
- I open Event Viewer ( Windows server 2008 ) to safe all events that was during long performance test ( about 12 hours )
- Choose “Windows log – Application” and set filter for current log ( Event level - errors, - warnings; Custom time range - my test time )
- Try to “Safe Filtered Log As…”

And I have file with 1,583 kB size ( xml file ) It isn’t contain all time range, only some hours. Also the same file size I get, even if the filter is installed for the entire period of time for which I have registered events.
File with all events without any filter has size, for my example, about 21,000kB.
So, I tried to select necessary range of events and have problem (as I’ve written above) that “Event Viewer can only save up to 256 individually selected events. To save a larger amount of events, use filtering or custom views to define the events of interest, then save them using “Save Events As”.”
File with 256 events has size about 1,300 kB, so as for my opinion event viewer safe no much more than 256 events for filtered range.

If I find solution I will share it here

[JAMES_911]

If you want to save your log data, you can archive event logs in any of the following formats:

• Log-file format (.evt)
• Text-file format (.txt)
• Comma-delimited text-file format (.csv)

To archive a log, follow these steps:

• Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.
• In the console tree, expand Event Viewer, and then right-click the log in which you want to archive, and then click Save Log File As.
• Specify a file name and location where you want to save the file. In the Save as type box, click the format that you want, and then click Save.

More information can be found here.

[Neit]

Thank you, James_911!

I know how to safe logs. You suggest me to safe all logs (for example all Application log), but it isn't solve my problem! Its logs from public Server I conducted performance test! So I can't delete logs that are not dedicated to my test. Other people can be interested in them.
I want (and need) to apply filters to log range for finding necessary information. And Event Viewer (maybe it is important that Server 2008 R2 Event Viewer ) didn't safe ALL filtered range!
Example: I have need events for 10 hours – apply filter to work with them only – safe filtered – check and see that the file contains only the events for 3 of 10 hours. Problem! Where is 7 hours?
I safe it in XML format (I have tools for analysis event logs in this format and don't want to change good working code).
txt can be ok but it also have problem with missing hours.

[Paisley007]

So basically you are talking about the filtering of the log files. So what i understand reading the full description of the problem you need to filter out the log files and hence for that you need to look out for the Text line Filter. So probably you must look out for the program in the internet and you will be able to sort out the issue as well. Do let me know if the solution was helpful for you.

[Neit]

So basically you are talking about the filtering of the log files. So what i understand reading the full description of the problem you need to filter out the log files and hence for that you need to look out for the Text line Filter. So probably you must look out for the program in the internet and you will be able to sort out the issue as well. Do let me know if the solution was helpful for you.

Paisey007, you don't understand me. Thanks for answer.