Hey Guys, i have got some breakthrough.... if this works then the entire process can be automated.

There is a eventquery.vbs script in Windows\System32 folder which can be used for capturing specific event related information. I was able to retrieve event info on my computer, i.e. from my local eventviewer.

here is the code written in a batch file...(sorry i cud not complete in KiXtart)

CD %~dp0
cscript eventquery.vbs /v /FI "Id eq 517" /FO CSV /l Security > 517.csv
cscript eventquery.vbs /v /FI "Id eq 528" /FO CSV /l Security > 528.csv

Following code prints at the screen
Code:

SHELL 'cscript eventquery.vbs /v /FI "Id eq 517" /FO CSV /l Security'


In the event viewer there is a provision for adding an EVT file as well.
eventquery also takes a USER DEFINED LOG as an input...(i m really happy about this... )
so i created this registry value:

HKLM\System\CurrentControlSet\Services\EventLog\\File with type
REG_SZ and with the value

After doing this, I cud see an entry in Event viewer along with Application, System & Security. But unfortunately the following command still doesnt work:

cscript eventquery.vbs /l . If this works then any STANDALONE EVT file can be queried directly.
Has anybody tried the above ???