Return
-
Title
Using ITEventExtractor for multiple machines -
Description
ITEventExtractor only creates one event log file when you have specified multiple computers in the cmd line.
-
Cause
This is an error in the documentation.
-
Resolution
1. Create a text file (for example list.txt) containing the list of comuters
2. Create a .bat file (for example ITEventExtractor.bat) containing:
for /F %%i in (list.txt) DO ITEventExtractor.exe /REPPATH:R:\ /LOGNAME:security /COMPUTER:%%i /File:c:\%%i.evt /DOMAIN:V998dpv1 /DATEFROM:03/16/2009 /DATETO:03/16/2009
3. Run the .bat file
NOTE: list.txt and ITEventExtractor.bat should be in ITEventExtractor.exe directory.