Windows OS .log files.

hack3rcon · 07-04-2017, 05:07 AM

Hello.
Why Linux can't open Windows OS .log files?

Thank you.

dave@burn-it.co.uk · 07-04-2017, 06:31 AM

Permissions??

pan64 · 07-04-2017, 06:52 AM

I think they have a special format and you cannot read their content without a reader. And there is no such reader for linux (at least I know about)

dave@burn-it.co.uk · 07-04-2017, 09:12 AM

Very few are of a special format. Most are just text files - when you get the correct permissions and locations to see them.

TB0ne · 07-04-2017, 05:22 PM

Quote:

Originally Posted by pan64

I think they have a special format and you cannot read their content without a reader. And there is no such reader for linux (at least I know about)

Very correct, pan64. There are some applications on Windows that generate plain text files, most are evt, evtx, or etl format, for use with the proprietary Windows event viewers. You *can* export such things to text/xml with something like:

Code:

Wevtutil qe /lf C:\windows\path\file.etl 
-or-
Tracerpt /l C:\windows\path\file.etl

This hasn't changed much since Windows 2000, according to Microsoft:
https://msdn.microsoft.com/en-us/library/bb726966.aspx
https://technet.microsoft.com/en-us/.../dd277418.aspx
https://docs.microsoft.com/en-us/win...and-event-logs

hack3rcon · 07-16-2017, 01:23 AM

Thus is it impossible?

hazel · 07-16-2017, 03:23 AM

Sounds rather like systemd journald!

pan64 · 07-16-2017, 03:33 AM

goto #3
How did you create that log file?