Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i saved an eventlog with display information on a computer. now i want to open this file on another computer with full event description. in my understanding this information should be saved in the LocalMetaData.mta file but i don't know how to use this file. how can i "import" the .mta file in order to get full eventlog description on the other computer?

share|improve this question
which eventlog do you want to open? Application\Security\System? Security\System should open Ok, Application may not - you need to have specific application installed to view its logs writted to windows Application log. – Volodymyr M. Nov 15 '12 at 11:55
it's the application log. and i want to see exchange entries – user1008764 Nov 15 '12 at 12:18
Either install Exchange or look for files with descriptions in installation folder of Exchange on source server. – Volodymyr M. Nov 15 '12 at 12:36
Which OS version is installed on Exchange server? 2003? 2008? – Volodymyr M. Nov 15 '12 at 12:39
i do not want to install the exchange admin tools. i think all data should be saved int the .mta file but i don't know how to use this file – user1008764 Nov 15 '12 at 13:50

If your MS Exchange Server resides on Windows Server 2008 OS, then you seem to be a lucky guy. I've just tried to right-click on Application log and chose "Save All Events As..." option. Then I specify xml as output format. Then you have an option to export or not to export Display Information. Click Save to save.

enter image description here

Unfortunately, no possibility to save as xml on Windows Server 2003, only txt/csv.

Tried to connect to remote Event Viewer from W2k8 to W2k3 server, but still cannot export to xml.

share|improve this answer
yes i know this. i have saved it with display information as evtx file because i would like to open it in eventvwr. my problem is that i can open the evtx file but not the meta data (.mta) file with the event descriptions – user1008764 Nov 15 '12 at 13:47

If you want to find a specific event or view a subset of events.... you can either search the log, or you can apply a filter to the log data as usual u must have done it .. u can follow the given link for detail Microsoft support

either u can go for a third party tool which will generate a comprehensive report for any critical event which u want to monitor also this will be able to create a real time alert by mail go for any third party freeware tool.

share|improve this answer
This answer does not address the question asked. – Ashley Steel Oct 6 '14 at 17:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.