The error is from the remote server dump. It appears the local dump is working.
Check out this post, which is a univeral log rotation tool. There's a secting of the config file specifically to rotate event log files.
At the end of that post is a small Kix script that does the actual event log dumping. The ELDump script we use now is slightly different, as it dumps to C:\temp, and then copies the log files to a remote server for automated analysis and archiving. The Log Rotate then moves the files from C:\Temp to a local archive that it maintains for 30 days - this allows local troubleshooting.
I'd recommend running the dump on the local machines and copying the results to a central server, rather than dumping remotely from a central server. This way, if your servers are time-synched, all your event logs will contain data for a consistent time period. We run this at 23:59, and generally have very few, if any, events from the few seconds before midnight in the following day's data. Another group at our company dumps from a central server, and the log dumps start at 1am and finish after 5am! Troubleshooting is a nightmare.
Glenn
_________________________
Actually I
am a Rocket Scientist!
