Custom path for NTEVL / .evtx

[Anon Anon]

Hi,

Is there any way to use ntevl probe but using a custom path for .evtx logs? People from windows team have several .evtx logs redirected to L:\

 

Any idea? Any way to customize the directory where ntevl looks for .evtx files? logmon?

 

Thanks!

[Anon Anon]

Is it possible? Maybe not?

 

Any comment will be helpful.

Thanks.

Javier

[RobPol]

Perhaps this will help

forum.nimsoft.com/t5/General/Adding-Addtional-Logs-to-ntevl/m-p/2325#M1492

[Anon Anon]

Uhm thanks for the info but they don't specify any new path, just adding a new log in the same MS default path it seems.

I already asked for a feature request since I dont see the option to do this.

Thanks.

[RobPol]

In the Unix world this would cry out for a link. Can you try using a shortcut in the default directory that points to the desired log?

[Anon Anon]

Tried it and after selecting the new subsystem created as described in the post u told me it shows nothing, so, it is not working with a simple shortcut (( Nice try...