SystemMonitor.Relog method

Article
12/11/2020

Relogs the counter data to a new file. You can also use this method to specify a new file type and to reduce the number of samples contained in the log file.

Syntax

SystemMonitor.Relog( _
  ByVal fileName As String, _
  ByVal fileType As SysmonFileType, _
  ByVal filter As Long _
)

Parameters

fileName [in]: File path of the log file. You can specify the path as an absolute, relative, or UNC path. The log file name extension must be either .blg, .tsv, or .csv. If a folder in the path does not exist, SYSMON will create it. If the file exists, the file is overwritten. SYSMON applies the default ACLs from the parent directory.
fileType [in]: Format of the counter data saved to the log file. You can specify either SysmonFileType.sysmonFileBlg, SysmonFileType.sysmonFileCsv, or SysmonFileType.sysmonFileTsv.
filter [in]: Number of samples from the old log files to save in the new log file. Specify 1 to save every sample from the old files to the new files. Specify 2 to save one out of every two samples from the old file. Specify 3 to save one out of every three samples from the old file. And so on.

Return value

This method does not return a value.

Remarks

This method uses the log files contained in the SystemMonitor.LogFiles collection to relog the counter data.

Requirements

Requirement	Value
Minimum supported client	Windows Vista [desktop apps only]
Minimum supported server	Windows Server 2008 [desktop apps only]
DLL	Sysmon.ocx