Home / server / Questions / 70328
Accepted
Ron Tuffin
Asked: 2009-10-02 03:02:55 +0800 CST

Where/how does Windows store the data in the event logs?

  • 772

We run some financial systems that log error messages to the system logs. I need to find out if we can clean these error messages from a PCI DSS point of view.

I am specificaly interested in the answer for:

  • Windows 2000 Server and
  • Windows 2003 SP1
windows

1 Answers

  1. Best Answer

    With Windows 2000/Server2003/Windows XP, the logs are stored in the %SystemRoot%\System32\Config directory, with an .evt extension.

    With Server 2008/Vista and up, the log are stored in the %SystemRoot%\system32\winevt\logs directory, and have an .evtx extension. It's possible to convert old .evt files to the newer .evtx format

    Within the Computer Manager you can also export them to a .txt or .csv file.

    • 40