Event Log Explorer Help Prev Page Prev Page
Using Event Log Explorer (Basics)
Opening Event Log
Opening Event Log Files
Viewing Event Logs
Viewing Event Properties
Sending Event Log to Printer
Event Log Explorer Concept
Computers Tree
Log Views
Advanced use
Filtering events in Event Log Explorer
Pre-filtering events (log loading options)
XML Query Filter
General Filter
Quick Filter
Linked event filter
Bookmarking events
Exporting Event Logs
Backing up Event Logs
Save Event Log As File
Automatic Event Log Backup
Backup batch
Add Computers Wizard
Log properties
Credential manager
Credentials conflict
Analytical reports
Event Alerter
Custom columns
Computer properties
Color coding
Task scheduler
Direct access to files
Working with database
Command line options
Log View Defaults
Log Loading Options
Log files
User interface elements
Main menu and toolbar
Event Log View
Event list
Control toolbar
Description box
Event list context menu
Computers Tree
Add Computer to Tree
Add Group to Tree
Remove Computer or Group
Sorting Items in Tree
Computers tree context menu
Filter/Search Window
XML Query window
Linked Event filter window
Select computer dialog
Description server
Peer-to-peer network issues
Event log backup utility
Event Log Database Export utility
License Agreement

Event Log Backup utility (elback.exe)

Event Log Backup utility lets you quickly save event logs from different locations in one place. You can find elback.exe in Event Log Explorer application folder.

ELBACK BatchFile

runs BatchFile to backup logs.


ELBACK DestDir EventLogs [/clear]

backups EventLogs to DestDir with optional clear option.


BatchFile format:

; - comment line

DestDir EventLogs [/clear]


DestDir - specifies a destination folder (or /NOBACKUP option).
If the destination folder name contains spaces, it must be enclosed in quotes.

EventLogs - specifies a particular event log or group of event logs which you want to backup to DestDir.
Event logs must be separated by spaces. If event log name contains spaced, it must be enclosed in quotes. Remote event logs are specified as \\ComputerName\LogName. You can use wildcard characters (*) to specify all event logs (\\ComputerName\*).

/clear - optionally clears EventLogs after backup.

Sample BatchFile with comments:

;backup to C:\Backup Application and system from Server, then clear
C:\Backup\ Server\Application Server\System /Clear

;Backup all logs from Server2 to C:\My Backup, without clearing.
"C:\My Backup\" Server2\*

;Clear all logs from
/Nobackup \\\* /clear

You can automate BatchFile creation from Event Log Explorer tree. More information is available in Export to backup batch.




run batchfile.elb batch to backup logs:
ELBACK batchfile.elb

backup Security log from Serv01 to C:\Backup:
ELBACK C:\Backup Security Serv01\Security

backup all logs from Serv01, Serv02 and Serv03 to C:\My Backup, then clear them:
ELBACK "C:\My Backup" \\Serv01\* \\Serv02\* \\Serv03\* /Clear

backup Directory Service from Serv01 to C:\My Backup:
ELBACK "C:\My Backup" "\\Serv01\Directory Service"


See also:
Event Log Database Export utility (eldbx.exe)


 © 2005-2019 FSPro Labs. All rights reserved.

Converted from CHM to HTML with chm2web Pro 2.85 (unicode)