Archiving a Log

When you archive an event log, you save it in one of three file formats:

The binary event data is saved if you archive a log in log file format, but it is discarded if you archive the log in text file format or in comma-delimited text file format. The event description is saved in all archived logs. When you archive a sorted log, the sort order affects the order in which event records are archived in a text file format or comma-delimited text file format. However, sort order does not affect the order of event records in a log archived in log file format. In either case, the sequence of data within each individual event record is record in the following order:

1. Date1

4. Type

7. User

2. Time

5. Category

8. Computer

3. Source

6. Event

9. Description


1 Depends on the sort order specified on the View menu.

Archival has no effect on the current contents of the active log. To clear the original log, you must click Clear All Events on the Log menu. To remove an archived log file, delete the file as you would other kinds of files.

For information on how to archive an event log, see "Archiving Event Logs" in Event Viewer Help.