Event Viewer Redirection Registry Hack

(modified from a registry hack by Gilles Ronsin)

IMPORTANT: This registry modification only works for Windows XP

In Windows XP, for most of the events Event Viewer would add at the end the following sentence:
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Fig. 1 - Event properties window

If one clicks on this link, another window will open with information that will be submitted to the site. The main problem is that in 99% of the cases, there is no additional information listed on that web page. The following registry modification will redirect all the requests for http://go.microsoft.com/fwlink/events.asp to http://www.eventid.net/eventviewer.asp. This page will take the event id and the source and redirect the request to the www.eventid.net search engine. For example, for the event shown above, the final page will be http://www.eventid.net/display.asp?eventid=7035&source=Service%20Control%20Manager

To implement this change download, unzip and import the EventViewerRedirect.zip file. Here is the content of the file:

Windows Registry Editor Version 5.00

# Allow to redirect the Windows Event viewer to the site of Event ID

# Author : Gilles Ronsin
# Web site (in French) :http://gilles.ronsin.free.fr/
# Link to the explanations (in French): http://gilles.ronsin.free.fr/#EventId
# Modified by Adrian Grigorof on October 29, 2004

----------------- cut here ------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Event Viewer]
"MicrosoftRedirectionProgramCommandLineParameters"="-url hcp://services/centers/support?topic=%s"
"MicrosoftRedirectionURL!"="http://go.microsoft.com/fwlink/events.asp"
"MicrosoftRedirectionURL"="http://www.eventid.net/eventviewer.asp"
"MicrosoftRedirectionProgram!"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d, 00,52,00,6f,00,6f,00,74,00,25,00,5c,00,50,00,43,00,48,00,65,00,61,00,6c,00, 74,00,68,00,5c,00,48,00,65,00,6c,00,70,00,43,00,74,00,72,00,5c,00,42,00,69, 00,6e,00,61,00,72,00,69,00,65,00,73,00,5c,00,48,00,65,00,6c,00,70,00,43,00, 74,00,72,00,2e,00,65,00,78,00,65,00,00,00
"MicrosoftRedirectionProgram"=-
------------------ cut here ----------------------------------------