Home
Event Log Explorer Help Prev Page Prev Page
Welcome
Introduction
Using Event Log Explorer (Basics)
Opening Event Log
Opening Event Log Files
Viewing Event Logs
Viewing Event Properties
Sending Event Log to Printer
Event Log Explorer Concept
Workspaces
Computers Tree
Log Views
Log API
Advanced use
Filtering events in Event Log Explorer
Pre-filtering events (log loading options)
XML Query Filter
General Filter
Quick Filter
Linked event filter
Bookmarking events
Exporting Event Logs
Backing up Event Logs
Save Event Log As File
Automatic Event Log Backup
Backup batch
Add Computers Wizard
Log properties
Credential manager
Analytical reports
Event Alerter
Custom columns
Computer properties
Color coding
Task scheduler
Command line options
Preferences
General
Log View Defaults
Log Loading Options
Appearance
Workspace
Confirmations
Log files
Print
Updates
User interface elements
Main menu and toolbar
Event Log View
Event list
Control toolbar
Description box
Event list context menu
Computers Tree
Add Computer to Tree
Add Group to Tree
Remove Computer or Group
Sorting Items in Tree
Computers tree context menu
Filter/Search Window
Select computer dialog
Peer-to-peer network issues
Tools
Event log backup utility
License Agreement

Preferences

Preferences dialog window allows you to change default Event Log Explorer parameters.
Top open Preferences dialog, select File->Preferences from the main menu.
Changes you made in this dialog are stored into the user's registry, so they are global for different workspaces.

General

User interface defines which user interface will be used.
In Multiple document interface (MDI) all event log views will reside under the main window.
In Tabbed document interface (TDI) all event log views will be contained within the main window, but only one of them is visible at the time.

Click items as follows defines the controls behavior on single or double click.

Minimize to notification area hides When Event Log Explorer from Windows task bar and displays Event Log Explorer icon in the system tray when the program is minimized.

Font and Size define the default font and its size for main Event Log Explorer window and event log views.

Visual Style defines Event Log Explorer visual style.

Location of criteria files (filters) defines a default path where Event Log Explorer will store event filter files. When Event Log Explorer starts, it loads filter names from this folder and displays them in Load Filter menu in the toolbar.

Log View Defaults

This settings will be applied to new log views, created with Event Log Explorer. They will not affect existing log views.

Enable auto-refresh force Event Log Explorer to reread event logs every Default auto-refresh interval.

Default sort order defines a default criteria (column) the event list will be sorted by. Enable Descending if you want to sort the event list in descending order. We recommend you to set Newest first sorting criteria - this will increase event log loading process.

Description server defines server name where Event Log Explorer will get descriptions by default. E.g. you can set this field to LOCALHOST, and Event Log Explorer will try to get description from your local computer.

Color coding file defines the default color coding file for all new event views. See also: Color Coding.

Log Loading Options

Temporary Data Storage sets the location of temporary data. When Event Log Explorer reads events from logs, it uses a temporary storage for these events. You can choose between Memory and Disk storage. Memory is the best choice for relatively short event logs (up to 300 000 events). Disk is good for a large number of events.

Event age allows you to pre-filter event log by events age.
Event types allows you to pre-filter event log by event type.

Event IDs allows you to pre-filter event log by events IDs. If you want to specify multiple IDs, please use coma as a delimiter. To specify a range of IDs, use "-".
You can use "!" to specify the exception list of events. All events and event ranges following "!" will be considered as exceptions. E.g. 10,100-1000,2000-5000!250,500-600,3000-3200 will be equal 10, 100-249,251-499,601-1000, 2000-2999,3201-5000

User names allows you to pre-filter event log by user name. To specify multiple user names, please use coma as a delimiter.

Computers allows you to pre-filter event log by computer name. To specify multiple computer names, please use coma as a delimiter.

We highly recommend you to pre-filter events by age and/or by type - this will force to load logs partially, reduce memory consumption and increase the performance.

 

Appearance

Window width and Window height define event log view window size. These options are effective only for MDI interface.
Open maximized - the new log view window will be maximized in the parent window. This option is effective only for MDI interface.
Display grid lines - if checked, event list will be displayed with grid lines.
Display description box
- if checked, when you open a new event log window, the description box will appear in the bottom part of the window.
Description box location - defines the default location of description box in log view windows.
Description box height - defines the height of the description box (in percentage of the log view height).
Description box width - defines the width of the description box (in percentage of the log view width).
Description in line - if checked, event list will be displayed with description column. Muiti-line descriptions will be converted into single-line once. Very long descriptions could be truncated in this column.
Autofit columns after loading - if checked, Event Log Exploer will adjust columns width when you load or refresh event logs. Unlike all other Log View Defaults, this option is applied even to already opened log views.

Workspace

On program start
Open last used workspace - if checked Event Log Explorer will start with last used workspace.
Open empty workspace - if checked Event Log Explorer will create UNTITLED workspace at start.

On new workspace defines the program behavior when creating a new workspace.
Add local computer to the tree - if checked, your computer will be automatically added as a first computer in the computers tree.
Run Add Computers Wizard - if checked, Event Log Explorer will start Add Computers Wizard to fill in the tree.

Restore from workspace file defines which kind of data should be restored from the workspace file.


Confirmations

Confirmations define when Event Log Explorer will display warning messages.

When closing event log window - if checked, the program will not warn you when you close event log window.
When closing all event log windows - if checked, the program will not warn you when you use File / Close All command.
When quitting the program - if checked, the program will not warn you when you quit it.
When closing the workspace (auto save workspace) - if checked, the program will always save changed workspace when you close it.

 

Log Files

Default mode to open .EVT file defines access mode to .evt files when you try to open .evt file.

Standard - Standard Win API access to .evt file. This option is default on Windows NT, 2000, XP, 2003 operating systems.

Direct - Direct access to .evt file. This option is default on Windows Vista.

See also Direct Access to Event Log Files

Associate Event Log Explorer with .EVT files. Enable this option if you want Event Log Explorer to open .EVT files when you click on them in Windows Explorer.
Associate Event Log Explorer with .EVTX files. Enable this option if you want Event Log Explorer to open .EVTX files when you click on them in Windows Explorer.
Automatically add log files to tree. If checked, Event Log Explorer will add event log files you open to the tree.

Put log files to group defines group name to which event log files will be added.

 

Print

These options define the default print layout.

Report title - defines report header.
Page footer - defines text messages that will be displayed in the left, center and right part at the bottom of each report page.
Striped report - if checked, the report will be displayed or printed with horizontal stripes - this will highly increase report readability.
Restore defaults - resets report layout defaults.

Reporting variables:

[LogName] - name of the event log.
[CompName] - name of the computer.
[Page#] - Report page number.
[TotalPages] - Number of pages in the report.
[Program] - Name of this program (Event Log Explorer).
[Date] - Date of print.
[Time] - Time of print.
[IsFiltered] - Will display "Filtered" if the log view is filtered.
[IsFiltered2] - Will display "Filtered: xx of xxxx event(s)" if the log view is filtered.

 

Updates

Automatically poll for updates - Hide Folders XP will be checking for updates automatically every (Polling interval) days.
Last poll - the date of the last check for updates.
Do not display warning message before connecting the Internet - if unchecked Event Log Explorer will display a dialog box notifying you about connecting the Internet.

 

 

© 2005-2015 FSPro Labs. All rights reserved.

Converted from CHM to HTML with chm2web Pro 2.85 (unicode)