We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

Corrupt EVT FileRSS

1 reply

Last post Nov 11, 2004 04:27 PM by Anonymous

  • Corrupt EVT File

    Nov 11, 2004 01:53 PM|Anonymous|LINK

    I have an EVT file from a computer that ran out of drive space in the middle of a write or something like that.  When I try to open it in the Event Log Viewer or parse it with logparser, it says that the file is corrupt and refuses to continue through the file.  Is there any way to force logparser to skip over errors and to continue parsing the information so I can extract as much readable info as possible?  I was using a hex editor and comparing the corrupt event log to a good one and hacking away at it without success. 

    EVT input format

  • Re: Corrupt EVT File

    Nov 11, 2004 04:27 PM|Anonymous|LINK

    Unfortunately, Log Parser uses the same API's used by Event Viewer, so if Log Parser gets an error from the API's, there's very little that can be done......sorry about that!

    EVT input format