Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
CODE PROJECT For Those Who Code
  • Home
  • Articles
  • FAQ
Community
  1. Home
  2. Database & SysAdmin
  3. System Admin
  4. Event log file

Event log file

Scheduled Pinned Locked Moved System Admin
c++windows-adminhelpannouncement
4 Posts 2 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A Offline
    A Offline
    ashokvishnu
    wrote on last edited by
    #1

    Hi All, If I update the value of File key in registry of Application event log (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application) to D:\ApplicationLog\Loggggggggggggggggggggggggggggggggggggggggggggggggggggg\AppEvent.Evt which has a length of 87characters, and restart the system windows event log will still write events to its default file in %SystemRoot%\System32\config directory. However if i give the path as D:\ApplicationLog\Logggggggggggggggggggggggggggggggggggggggggggggggggggg\AppEvent.Evt whose length is 86characters and restart then events will be written to this file. It seems windows will not consider a path whose length is greater than 86 characters in registry for event logging. I have tried expandable path also, and the issue remains even though the full path after expanding can be greater than 86 characters. That is %xxxx%/etc/etc will not be taken if length greater than 86. I have searched a lot for a an explanation for this behaviour but found none. Anyone here has some idea why this is happening. Thanks

    C++beginer

    D 1 Reply Last reply
    0
    • A ashokvishnu

      Hi All, If I update the value of File key in registry of Application event log (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application) to D:\ApplicationLog\Loggggggggggggggggggggggggggggggggggggggggggggggggggggg\AppEvent.Evt which has a length of 87characters, and restart the system windows event log will still write events to its default file in %SystemRoot%\System32\config directory. However if i give the path as D:\ApplicationLog\Logggggggggggggggggggggggggggggggggggggggggggggggggggg\AppEvent.Evt whose length is 86characters and restart then events will be written to this file. It seems windows will not consider a path whose length is greater than 86 characters in registry for event logging. I have tried expandable path also, and the issue remains even though the full path after expanding can be greater than 86 characters. That is %xxxx%/etc/etc will not be taken if length greater than 86. I have searched a lot for a an explanation for this behaviour but found none. Anyone here has some idea why this is happening. Thanks

      C++beginer

      D Offline
      D Offline
      Dave Kreskowiak
      wrote on last edited by
      #2

      From your testing, it indeed looks like there is a limit on the filepath size. I can't, for the life of me, find any documentation on this limit though. It doesn't look like Microsoft is even aware of it. It looks like you're stuck dealing with the problem and keeping the filepath for you custom log shorted than 86 characters...

      Dave Kreskowiak Microsoft MVP - Visual Basic

      A 1 Reply Last reply
      0
      • D Dave Kreskowiak

        From your testing, it indeed looks like there is a limit on the filepath size. I can't, for the life of me, find any documentation on this limit though. It doesn't look like Microsoft is even aware of it. It looks like you're stuck dealing with the problem and keeping the filepath for you custom log shorted than 86 characters...

        Dave Kreskowiak Microsoft MVP - Visual Basic

        A Offline
        A Offline
        ashokvishnu
        wrote on last edited by
        #3

        Yeah. We have created a custom log for one of the applications and came across this behaviour by chance. Now the customer wants any microsoft document on this but we cant find any.

        C++beginer

        D 1 Reply Last reply
        0
        • A ashokvishnu

          Yeah. We have created a custom log for one of the applications and came across this behaviour by chance. Now the customer wants any microsoft document on this but we cant find any.

          C++beginer

          D Offline
          D Offline
          Dave Kreskowiak
          wrote on last edited by
          #4

          Well, about the only thing you can do to get that is to open a support incident with MS, probably for some $, and see what they can give you.

          Dave Kreskowiak Microsoft MVP - Visual Basic

          1 Reply Last reply
          0
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          • Login

          • Don't have an account? Register

          • Login or register to search.
          • First post
            Last post
          0
          • Categories
          • Recent
          • Tags
          • Popular
          • World
          • Users
          • Groups