Save Event Log
Updated: May 13, 2016
Applies To: System Center 2012 SP1 - Orchestrator, System Center 2012 - Orchestrator, System Center 2012 R2 Orchestrator
The Save Event Log activity is used to save entries from an event log so that they can be used later. The Save Event Log activity saves the event log entries to a delimited text file in a format that you specify. The activity allows you to choose which fields will be saved and allows you to filter against the fields to only allow particular event log entries to be saved. This activity uses a satellite license.
The Save Event Log activity can be used to create audit trails of problems that occur with a particular application or specific categories of event log entries. These saved files can later be used to track the performance of servers and applications in your network.
Before you configure the Save Event Log activity, you need to determine the following:
The event log that you are saving from
The computer where it is located
The fields that you want to include
The format of the file
If you require only specific entries to be saved and not the entire event log, you will need to know what fields to filter against as well as what values to filter.
Use the following information to configure the Save Event Log activity.
Type the computer where the event log is located. Type localhost to specify the runbook server where the runbook is being processed. You can also use the ellipsis ( ... ) button to browse for the computer.
Type the name of the Windows Event Log where the entries that you are saving are located. You can also use the ellipsis ( ... ) button to browse for the event log name. Browsing is only available if you have specified a valid Computer.
Select all the event Log fields that you want to save to the file. You have the option to select Event ID, Source, Category, Description, Type, Computer, and Date/time.
Select and type the specific event ID of the event log entry that you want to save.
Select and type the value that the Source field of the event log entries will need to match.
Select and type the value that the Category field of the event log entries will need to match.
Select and type the value that the Description field of the event log entries will need to match.
Select and specify the value that the Type field of the event log entries will need to match.
Select and specify the value that the Computer field of the event log entries will need to match.
Select and specify the ranges of dates that the events will need to be from to be included.
Type the name of the file where the event log entries will be saved. This file will be saved on the computer where the event log resides.
If the file exists
Select the action that you want to take if a file with the same name already exists:
Select the format that will be used to save the event log entries to the file:
Type the delimiter that you want to use to separate the fields of each entry.
Create column headings
Select to save the column header information when saving a set of entries to a file. The header information contains meta data such as the field names.
The following table lists the published data items.
Event log name
The name of the event log that was saved.
The computer where the event log that was saved resides.
Name and path of the file where entries are saved
The full path of the file where the event log was saved.
Number of Entries
The number of entries that were saved.