Event Log Database Export utility (eldbx.exe)
This utility is available only in the Enterprise Edition.
Event Log Backup utility lets you quickly save event logs from different locations into a database table. You can find eldbx.exe in Event Log Explorer application folder.
Usage
eldbx [OPERATION] /OPTION:VALUE [/OPTION:VALUE] ...
Operations:
Export Export events into database table
CreateDB Create database
Export:
eldbx EXPORT [/DBMS:mssql] /DBSERVER:<server_name> [/DBAUTH:{windows|server}]
[/DBUSER:<db_user_name>] [/DBPASSWORD:<db_password>]
/DBNAME:<db_name> /TABLE:<table_name> [/TABEXTTS:{date|datetime}]
[/TXA:{fail|append|overwrite}] [/HOST:<host_name>] [/USER:<user_name>]
[/PASSWORD:<password>] [/LOGNAME:<log_name>] [QUERY:<query_file_name>]
[/EDR:{all|ri|render|no}] [/CLEARLOG:{no|yes|tolerate}]
[/VERBOSE:{0|1|2|3}]
|
Option
|
Value
|
Description
|
|
/DBMS
|
{mssql}
|
Specifies database management system.
Values:
mssql - Microsoft SQL Server.
Optional. Default value: mssql.
|
|
/DBSERVER
|
<server_name>
|
Specifies database server name (instance name).
Mandatory.
For SQL Server, the default instance is the computer name.
For SQL Server Express, the default instance is named <computer_name>\sqlexpress
|
|
/AUTH
|
{windows|server}
|
Specifies authentication method
windows - uses Windows authentication.
server - uses SQL server authentication.
Optional. Default value: windows.
|
|
/DBUSER
|
<db_user_name>
|
SQL server user name.
Optional.
|
|
/DBPASSWORD
|
<db_password>
|
SQL server user password.
|
|
/DBNAME
|
<db_name>
|
Specifies Database name.
Mandatory
|
|
/TABLE
|
<table_name>
|
Specifies table name.
Mandatory
|
|
/TABEXTTS
|
{date|datetime}
|
Specifies table extension timestamp.
Values:
date - adds current date to table name as
-yyyy-mm-dd.
datetime - adds current date and time as
-yyyy-mm-dd-hh-mm-ss.
Optional.
|
|
/TXA
|
{fail|append|overwrite}
|
Specifies what to do if table already exists.
Values:
fail - quit application with error.
append - append events to the table.
overwrite - delete existing and write new.
Optional. Default value: fail.
|
|
/HOST
|
<host_name>
|
Specifies host name to read events from.
Optional. Localhost is implied.
|
|
/USER
|
<user_name>
|
Specifies user name to access logs on host.
Optional.
|
|
/PASSWORD
|
<password>
|
Specifies user password to access logs.
Optional.
|
|
/LOGNAME
|
<log_name>
|
Specifies log name to export.
Mandatory if /QUERY not specified.
|
|
/QUERY
|
<query_file_name>
|
Specifies file containing XML query to
get events for export.
Mandatory if /LOGNAME not specified.
|
|
/EDR
|
{all|ri|render|no}
|
Specifies event description rendering options.
Values:
no - do not render event description.
render - render event description.
ri - use event RenderingInfo.
all - try RenderingInfo, if not available,
render description.
Optional. Default value: all.
|
|
/CLEARLOG
|
{no|yes|tolerate}
|
Option to clear event log after export.
Values:
no - do not clear event log.
yes - clear event log.
tolerate - clear event log, do not report
error if clearing fails.
Optional. Default value: no.
NOTE. "Export&clear" is not an atomic operation! There is a chance that some events appear after export and before clearing!
|
|
/VERBOSE
|
{0|1|2|3}
|
Specifies verbosity level.
Values:
0 - display all information.
1 - display event message rendering issues, warnings and errors.
2 - display warning and errors.
3 - display errors only.
Optional. Default value: 2.
|
CreateDB:
Eldbx CREATEDB [/DBMS:mssql] /DBSERVER:<server_name> [/AUTH:{windows|server}]
[/DBUSER:<db_user_name>] [/DBPASSWORD:<db_password>] /DATABASE:<db_name>
[/DBSIZE:init_db_size] [/DBGROW:db_grow] [/LOGSIZE:init_log_size]
[/LOGGROW:log_grow] [/VERBOSE:{0|1|2|3}]
|
Option
|
Value
|
Description
|
|
/DBMS
|
{mssql}
|
Specifies database management system.
Values:
mssql - Microsoft SQL Server.
Optional. Default value: mssql
|
|
/DBSERVER
|
<server_name>
|
Specifies database server name (instance name).
Mandatory.
For SQL Server, the default instance is the computer name.
For SQL Server Express, the default instance is named <computer_name>\sqlexpress
|
|
/AUTH
|
{windows|server}
|
Specifies authentication method
windows - uses Windows authentication.
server - uses SQL server authentication.
Optional. Default value: windows.
|
|
/DBUSER
|
<db_user_name>
|
SQL server user name.
Optional.
|
|
/DBPASSWORD
|
<db_password>
|
SQL server user password.
|
|
/DBNAME
|
<db_name>
|
Specifies Database name.
Mandatory
|
|
/DBSIZE
|
<init_db_size>
|
Initial size of the database data file (in MB)
Optional. Default value: 25.
|
|
/DBGROW
|
<db_grow>
|
Specifies the automatic growth increment of the database data file in percent.
Optional. Default value depends on SQL Server.
|
|
/LOGSIZE
|
<init_log_size>
|
Initial size of the database log file (in MB).
Optional. Default value: 10
|
|
/LOGGROW
|
<log_grow>
|
Specifies the automatic growth increment of the database log file in percent.
Optional. Default value depends on SQL Server.
|
|
/VERBOSE
|
{0|1|2|3}
|
Specifies verbosity level.
Values:
0 - display all information.
1 - not used with CreateDB command.
2 - display warning and errors.
3 - display errors only.
Optional. Default value: 2.
|
Examples:
Create database Events:
eldbx CREATEDB /DBSERVER:Server /DBNAME:Events
Export local Application log into table app_events:
eldbx EXPORT /DBSERVER:Server /DBNAME:Events /TABLE:app_events /LOGNAME:Application
Append System log from Host into app_events providing specific credentials:
eldbx EXPORT /DBSERVER:Server /DBNAME:Events /TABLE:app_events /TXA:append /HOST:Host /LOGNAME:System /USER:Administrator /PASSWORD:password
