LogParser[1] is not that bad for querying event log (and other types of log), even though I've never used to to be really quick querying the system. I was using

LogParser[1] is not that bad for querying event log (and other types of log), even though I've never used to to be really quick querying the system. I was using it in the past on a scheduled basis to process event files and save relevant info in a SQL Server database. Recently I found this agent: http://nxlog-ce.sourceforge.net/ http://nxlog-ce.sourceforge.net/ but I haven't yet the occasion to try it. Probably a good approach would be using this kind of agent plus something like Logstash. On the other hand sometimes it happened to me to find servers with event log corrupted, so log was lost (and it was not possible to log other info before doing a reset of the log). That's not nice.. [1] http://www.microsoft.com/en-us/download/details.aspx?id=24659 http://www.microsoft.com/en-us/download/details.aspx?id=2465...