Tivoli Storage Manager for Windows Backup-Archive Clients Installation and User's Guide

Restore Eventlog

The restore eventlog command restores the active Windows NT, 2000, XP, and Windows.NET event logs stored on the Tivoli Storage Manager server.

Event logs are restored to the adsm.sys\eventlog.res directory under the root directory of the system drive or to a destination you specify.

Note:

We recommend that you use the restore systemobject command to restore all system objects at the same time.

Supported Clients

This command is valid for the Windows NT, 2000, XP, and Windows.NET clients only.

Syntax

For Windows 2000, XP, Windows.NET

>>-REStore Eventlog--+----------+------------------------------><
                     '- options-'
 
 

For Windows NT

                         .-ENTIRE-.
>>-REStore Eventlog--+- -+--------+----------+------------------>
                     '- LOG-+- APPLICATION-+-'
                            +- SECURITY----+
                            '- SYSTEM------'
 
>-- destinationfilespec--+----------+--------------------------><
                         '- options-'
 
 

Parameters

The following parameters are for Windows NT.

ENTIRE

Restores all event logs stored on the server.

LOG

Restores one of the following event logs:

APPLICATION

Restores the application event log.

SECURITY

Restores the security event log.

SYSTEM

Restores the system event log.

destinationfilespec

Identifies the path where you want to place the restored files. If you do not specify a destination, Tivoli Storage Manager restores the files to the adsm.sys\eventlog.res directory on the system drive root directory.

options

You can use these command line options with the restore eventlog command: inactive, pittime, pitdate, pick. See Chapter 9, Setting Processing Options for more information.

Examples

Task

Restore the entire event log.

Command: rest event entire

Task

Restore the security event log.

Command: rest event log security

Task

Restore the system event log.

Command: rest event log system c:\tempdir