Professional Documents
Culture Documents
Article ID: 308471 - Last Review: February 28, 2007 - Revision: 3.5
List of features available in the Event Comb tool
System Tip
This article applies to a different version of Windows than the one you are using. Content in this
article may not be relevant to you.Visit the Windows XP Solution Center
Notice
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-
of-Support Solution Center (http://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000) is a starting
point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support
Lifecycle Policy (http://support.microsoft.com/lifecycle/) .
The Event Comb tool (Eventcombmt.exe) is a multi-threaded tool that can be used
to gather specific events from the Event Viewer logs of different computers at the
same time.
The Event Comb tool includes preconfigured search categories, for example account
lockouts. The account lockout search includes events relevant to account lockouts,
such as Events 529, 644, 675, 676, and 681.
In the Event Comb tool you can specify any or all the following search criteria:
Multi-threaded for very fast performance and can search up to 100 different
servers at the same time.
Provides multiple methods of adding servers to a search, such as using a
text file, browse list, and Active Directory.
Select from preconfigured searches.
Searches through saved event logs.
Auto-detects the type of saved log file.
Save the search results to a text file, Access or SQL database.
Gather events that have occurred since your last search.
Capture statistics about event frequency.
Save and load your searches.
Save text files as .txt or .csv files.
Search Event logs from oldest to newest or newest to oldest.
Resolve IP Addresses to hostnames in Event 675 errors.
http://support.microsoft.com/kb/308471 4/10/2011
List of features available in the Event Comb tool Page 2 of 2
The Event Comb tool is included in the Windows Server 2003 resource kit tools. You
can download these tools from the following location:
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-
57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en (http://www.microsoft.com/downl
oads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en)
APPLIES TO
http://support.microsoft.com/kb/308471 4/10/2011