Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

i saved an eventlog with display information on a computer. now i want to open this file on another computer with full event description. in my understanding this information should be saved in the LocalMetaData.mta file but i don't know how to use this file. how can i "import" the .mta file in order to get full eventlog description on the other computer?

share|improve this question
    
which eventlog do you want to open? Application\Security\System? Security\System should open Ok, Application may not - you need to have specific application installed to view its logs writted to windows Application log. –  Volodymyr Nov 15 '12 at 11:55
    
it's the application log. and i want to see exchange entries –  user1008764 Nov 15 '12 at 12:18
    
Either install Exchange or look for files with descriptions in installation folder of Exchange on source server. –  Volodymyr Nov 15 '12 at 12:36
    
Which OS version is installed on Exchange server? 2003? 2008? –  Volodymyr Nov 15 '12 at 12:39
    
On Windows Sevrer 2008 R2 –  user1008764 Nov 15 '12 at 13:39
show 1 more comment

2 Answers

If your MS Exchange Server resides on Windows Server 2008 OS, then you seem to be a lucky guy. I've just tried to right-click on Application log and chose "Save All Events As..." option. Then I specify xml as output format. Then you have an option to export or not to export Display Information. Click Save to save.

enter image description here

Unfortunately, no possibility to save as xml on Windows Server 2003, only txt/csv.

Tried to connect to remote Event Viewer from W2k8 to W2k3 server, but still cannot export to xml.

share|improve this answer
    
yes i know this. i have saved it with display information as evtx file because i would like to open it in eventvwr. my problem is that i can open the evtx file but not the meta data (.mta) file with the event descriptions –  user1008764 Nov 15 '12 at 13:47
add comment

If you want to find a specific event or view a subset of events.... you can either search the log, or you can apply a filter to the log data as usual u must have done it .. u can follow the given link for detail Microsoft support

either u can go for a third party tool which will generate a comprehensive report for any critical event which u want to monitor also this will be able to create a real time alert by mail go for any third party freeware tool.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.