如果您想更改Windows 10中的默认^{(Windows 10)}事件日志^{(Event Log)}文件位置，本文将对您很方便。可以使用本地组策略编辑器^{(Local Group Policy Editor)}和注册表编辑器^{(Registry Editor)}修改日志文件的预设位置。但是，该位置必须可由事件日志^{(Event Log)}服务写入并且管理员可以访问。

更改Windows 10中的默认^{(Windows 10)}事件日志^{(Event Log)}文件位置

要使用组策略编辑器^{(Group Policy Editor)}更改默认事件日志^{(Event Log)}文件位置，请执行以下步骤 -

1. 按Win+R。
2. 键入gpedit.ms c 并按Enter按钮。
3. 转到计算机配置中的^{(Computer Configuration)}安全^(Security)性。
4. 双击控制日志文件的位置^{(Control the location of the log file)}设置。
5. 选择启用^(Enabled)选项。
6. 在框中输入路径。
7. 单击应用^(Apply)和确定^(OK)。

让我们详细研究这些步骤。

首先，按 Win+R 打开运行^(Run)提示。然后，键入gpedit.msc并点击 Enter 按钮。在您的计算机上打开本地组策略编辑器^{(Local Group Policy Editor)}后，请按照以下路径 -

Computer Configuration > Administrative Templates > Windows Components > Event Log Service > Security

在 Security 文件夹中，您将看到一个名为 Control the location of the log file的设置。双击并选择 启用 ^(Enabled )选项。

然后，输入可由事件日志^{(Event Log)}服务写入且计算机管理员可访问的路径。在选择路径时，您必须考虑这两个条件。否则，本指南将不起作用。

如果要恢复到原始路径，请访问相同的位置，然后选择 未配置^{(Not Configured)}选项。

阅读^(Read)：Windows 10 中缺少事件查看器日志^{(Event Viewer logs missing in Windows 10)}。

使用注册表编辑器^{(Registry Editor)}修改事件日志^{(Event Log)}文件的位置

要修改Windows 10中^{(Windows 10)}事件日志^{(Event Log)}文件的位置，请按照以下步骤操作 -

1. 按Win+R。
2. 键入regedit并点击Enter按钮。
3. 单击是^(Yes)按钮。
4. 在HKLM 键^{(HKLM key)}中导航到Windows。
5. 右键单击 Windows > 新建 > 密钥。
6. 将其命名为EventLog。
7. 右键单击^{(Right-click)}EventLog EventLog > New > Key。
8. 将其命名为Security。
9. 右键单击Security > New > String Value。
10. 将其命名为File。
11. 双击文件^(File)以设置数值数据。
12. 输入位置路径并单击OK。

由于您将在注册表编辑器^{(Registry Editor)}中创建和更改某些值，因此建议备份所有注册表文件^{(backup all Registry files)} 并 创建系统还原点。

要开始，请按 Win+R，键入regedit，然后按 Enter 键。如果它显示UAC窗口，请单击 是 ^(Yes )按钮。打开注册表编辑器^{(Registry Editor)}后，导航到此路径-

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

在 Windows 键中，您必须创建一个子键。为此，右键单击Windows >  New > Key 并将其命名为 EventLog。

现在，按照相同的步骤在EventLog^(EventLog)中创建一个子键 。换句话说，右键单击EventLog >  New > Key，并将其命名为 Security。

之后，您必须在 安全 ^(Security )密钥中创建一个字符串值。^{(String Value)}为此，右键单击Security并选择 New > String Value。然后，将其命名为 File。

接下来，将值数据更改为 File  String Value。为此，请双击 File，然后输入要将Event Log文件保存为 Value data的路径。

单击 确定 ^(OK )按钮以保存更改。

如果要选择默认路径，请右键单击 EventLog并选择 删除 ^(Delete )选项。然后，您必须通过单击肯定选项来确认删除。

阅读^(Read)：缺少事件查看器日志^{(Event Viewer logs are missing)}。

就这样！希望能帮助到你。

How to change the default Event Log file location in Windows 10

If you want to change the default Event Log file location in Windows 10, this article will be handy for you. It is possіble to modify the log file’s pre-set location using Local Group Policy Editor and Rеgistry Editor. However, the location must be writable by the Event Log sеrvice and accessible to the admіnistrators.

Change the default Event Log file location in Windows 10

To change the default Event Log file location using Group Policy Editor, follow these steps-

1. Press Win+R.
2. Type gpedit.msc and press the Enter button.
3. Go to Security in Computer Configuration.
4. Double-click on the Control the location of the log file setting.
5. Select the Enabled option.
6. Enter a path in the box.
7. Click on Apply and OK.

Let’s delve into the steps in detail.

At first, press Win+R to open the Run prompt. Then, type gpedit.msc and hit the Enter button. After opening the Local Group Policy Editor on your computer, follow this path-

Computer Configuration > Administrative Templates > Windows Components > Event Log Service > Security

In the Security folder, you will see a setting called Control the location of the log file. Double-click on and select the Enabled option.

Then, enter a path that is writable by Event Log service and accessible to the administrator(s) of the computer. While choosing a path, you must consider these two conditions. Otherwise, this guide won’t work.

If you want to revert to the original path, visit the same place, and select Not Configured option.

Read: Event Viewer logs missing in Windows 10.

Modify the location of the Event Log file using Registry Editor

To modify the location of the Event Log file in Windows 10, follow these steps-

1. Press Win+R.
2. Type regedit and hit the Enter button.
3. Click the Yes button.
4. Navigate to Windows in HKLM key.
5. Right-click on Windows > New > Key.
6. Name it as EventLog.
7. Right-click on EventLog > New > Key.
8. Name it as Security.
9. Right-click on Security > New > String Value.
10. Name it as File.
11. Double-click on File to set the Value data.
12. Enter the location path and click OK.

As you will creating and changing some values in Registry Editor, it is recommended to backup all Registry files and create a System Restore point.

To get started, press Win+R, type regedit, and press the Enter key. If it shows the UAC window, click on the Yes button. After opening the Registry Editor, navigate to this path-

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

In the Windows key, you will have to create one sub-key. For that, right-click on Windows > New > Key and name it as EventLog.

Now, follow the same steps to create a sub-key inside EventLog. In other words, right-click on EventLog > New > Key, and name it as Security.

Following that, you will have to create a String Value in the Security key. For that, right-click on Security and select New > String Value. Then, name it as File.

Next up, change the Value data off File String Value. To do so, double-click on File, and enter a path where you want to save the Event Log file as Value data.

Click on the OK button to save the change.

If you want to choose the default path, right-click on EventLog and select the Delete option. Then, you will have to confirm the delete by clicking on the affirmative option.

Read: Event Viewer logs are missing.

That’s all! Hope it helps.

Related posts

• 如何启用Print Logging在Event Viewer上Windows 10

• 如何在Windows 10中清除Event Viewer中的所有Event Logs

• 如何检查在Windows 10的Shutdown and Startup Log

• 如何详细介绍Windows 10的Event Logs与Full Event Log View

• Event Log中的Windows 10丢失事件

• Event ID 158错误 - 同磁盘GUIDs assignment在Windows 10

• Event ID 10006和1530：COM+ application不在Windows 10工作

• 如何在Windows 10上禁用Feature Updates的保障措施

• Monitor Windows Event Log Files使用SnakeTail tail实用程序

• Convert EPUB至MOBI - 用于Windows 10的免费转换器工具

• 自动Log在Windows 10中User Account

• Windows Event Log Service未启动或不可用

• 如何在Windows 10使用Network Sniffer Tool PktMon.exe

• 特定于应用程序的权限设置不授予本地激活

• Windows 10中的启用包是什么

• 如何在Windows 10上使用PIP安装NumPy

• 在 Windows 10 中以管理员身份登录

• 在哪里找到以及如何在Windows 11/10中读取Windows Update log

• Windows 10 BSOD log file location在哪里？

• 创建Keyboard Shortcut以在Windows 10中打开您最喜爱的Website