How can I relocate the Application, Security, and System event logs in Windows Server 2008 R2? The KB for 2003 does not work, neither does going into the properties of each log and changing the path. By all accounts it should work, but it simply does not move the event log.
You can do this from the GUI or command line.
The registry key that sets the value is HKLM\SYSTEM\ControlSet001\Services\eventlog\$LogName
You can modify it as well by using the following commands (modify to fit your environment)