Microsoft KB Archive/932579

= The event log is not saved when you click &quot;Save and Clear&quot; after you click Clear Log in Event Viewer in Windows Vista =

Article ID: 932579

Article Last Modified on 3/15/2007

-

APPLIES TO


 * Windows Vista Home Basic
 * Windows Vista Home Premium
 * Windows Vista Ultimate
 * Windows Vista Business
 * Windows Vista Enterprise
 * Windows Vista Home Premium 64-bit edition
 * Windows Vista Ultimate 64-bit edition
 * Windows Vista Enterprise 64-bit edition

-



SYMPTOMS
In Windows Vista, the event log is not saved when you click Save and Clear after you click Clear Log in Event Viewer.



CAUSE
This problem occurs if Windows Vista cannot access the Universal Naming Convention (UNC) path of the location where you want to save the event log.



WORKAROUND
To work around this problem, follow these steps:
 * 1) Start Event Viewer.
 * 2) Expand Windows Logs or Applications and Services Logs, depending on the log that you want to save.
 * 3) Click the log that you want to save, and then click Save Events As or Save Selected Events in the Actions pane.
 * 4) In the Save As dialog box, type a descriptive name for the log, and then click Save.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
In Windows Vista, Event Viewer stores the UNC path of the location where you want to save an event log, even if you specify a local drive as the location. For example, suppose you specify the following path when you save the event log:

C:\Users\ \Documents\event.evtx

In this case, Windows Vista saves the event log to the following location:

\\ \C$\Users\ \Documents\event.evtx

If the UNC path of this location is unavailable, Windows Vista cannot save the event log. For example, if a security program prevents the computer from saving this file by using the UNC name, Windows Vista cannot save the event log. Or, if the C$ administrative share is disabled, Windows Vista cannot save the event log.

To start Event Viewer, click Start, type event viewer in the Start Search box, and then click Event Viewer in the Programs list.

If you are prompted for an administrator password or confirmation, type the password or click Continue.

Keywords: kbpending kbexpertiseinter kbbug kbtshoot KB932579

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.