File

HKLM\SYSTEM\CurrentControlSet\Services\EventLog\<Log-name>

Data type Range Default value
REG_EXPAND_SZ Path and file name %SystemRoot%\System32\Config\AppEvent.evt

Description

Specifies the fully qualified path to the file where each event log is stored. This entry enables Event Viewer and other log processing programs to find the log files.

The value of this entry is displayed in the Log name field of the Properties dialog box for a log in Event Viewer.

Change method

To view the value of this entry, use Event Viewer.

Note Image Note

If you must move the event log files, do not use variables other than %SystemRoot% in the file paths. Event Viewer cannot resolve variables other than %SystemRoot% on remote computers.