Event Viewer log
How do you delete the warning and error records listed on the Event Viewer and is there a way of eliminating these results?Latest report stated "Event log fiel is corrupt"! Any views would be much appreciated.1 person needs an answerI do too
August 21st, 2010 4:07pm

Delete the Event Viewer log files via Start > Administrative Tools > Event Viewer > highlight Application > Action > Clear All Events then click No to the “Do you want to save..... “ question.Repeat the above by highlighting and deleting the other categories: Security, System, Internet Explorer and Windows Power Shell.
Free Windows Admin Tool Kit Click here and download it now
August 21st, 2010 5:18pm

It is easy to clear the log as BurrWalnut says, but that will not prevent new events/errors from appearing.Do you want to just clear out the logs or figure out what is going on and fix it?You can adjust the size and scope of your event logging from hardly anything to wide open, but usually the logs just takes care of themselves with default settings.You can decide to actually look at the events and figure out if your system needs attention or not.No event in the Event Viewer should defy reasonable explanation.If you want to pursue events in the log and actually understand it, do this:Here is a method to post the specific information about individual events.To see the Event Viewer logs, click Start, Settings, Control Panel, Administrative Tools, Event Viewer.A shortcut to Event Viewer is to click Start, Run and in the box enter:%SystemRoot%\system32\eventvwr.msc /sClick OK to launch the Event Viewer.The most interesting logs are usually the Application and System. Some logs such as Security and Internet Explorer may be completely empty or have only a few items. The default settings for XP is not to log all that activity unless you need to troubleshoot some issue in those areas. If you enable the logging for them the logs fill up quickly and could negatively effect your system performance with all the extra (usually unnecessary) activity.If you have Microsoft Office installed, it has its own logs and they may be empty or occasional boring activity or very little activity if there is no problem with your Office applications. This is normal.Not every event is a problem, some are informational messages that things are working okay and some are warnings.No event should defy reasonable explanation.Each event is sorted by Date and Time. Errors will have red Xs, Warnings will have yellow !s. Information messages have white is. Not every Error or Warning event means there is a serious issue. Some errors are excusable at startup time when Windows is booting as thing start up at different times, but eventually everything should settle down to some kind of normalcy. Try to find just the events at the date and time around your problem.If you double click an event, it will open a Properties window with more information. On the right are black up and down arrow buttons to scroll through the open events. The third button that looks like two pages on top of each other is used to copy the event details to your Windows clipboard.When you find an interesting event that occurred around the time of your issue, click the third button under the up and down arrows to copy the details and then you can paste the details (right click, Paste or CTRL-V) the detail text back here for analysis. Remove any personal information from your information after pasting if you are compelled to do so.If you paste an Event, it will look something like this boring system startup event:Event Type: InformationEvent Source: Service Control ManagerEvent Category: NoneEvent ID: 7035Date: 7/14/2010Time: 5:54:18 PMUser: JoseComputer: ComputerDescription:The Remote Access Connection Manager service was successfully sent a start control.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.To get a fresh start on any Event Viewer log, you can choose to clear the log (backing up the log is offered), then reproduce your issue, then look at just the events around the time of your issue and troubleshoot the events that are happening when you have your issue.Please vote my posts as helpful so I can get lots of points. I am saving up for a pony!
August 21st, 2010 5:35pm

when I click on the action I don't have an option to clear all events. I am running win7 can you tell me if there is another way I can delete them?
Free Windows Admin Tool Kit Click here and download it now
December 17th, 2010 11:45pm

when I click on the action I don't have an option to clear all events. I am running win7 can you tell me if there is another way I can delete them?This is the XP section of Answers and you’re running Windows 7.However, this is how it's done in Windows 7:Open Event Viewer and in the left pane, right-click the one you want then click Clear Log. A typical one is Microsoft-Windows-Diagnostics-Performance/Operational.evtx. The logs have an extension of .evtx and are stored in \Windows\System32\winevt\Logs.The Administrative Events log in Customs Views is a combination of several logs and cannot be cleared by right-clicking it. Run this batch file to delete it and all the othershttp://www.sevenforums.com/tutorials/25480-event-viewer-one-click-clear.html?ltr=E
December 18th, 2010 3:52am

No event in the Event Viewer should defy reasonable explanation.Some logs such as Security and Internet Explorer may be completely empty or have only a few items. The default settings for XP is not to log all that activity unless you need to troubleshoot some issue in those areas. If you enable the logging for them the logs fill up quickly and could negatively effect your system performance with all the extra (usually unnecessary) activity.Each event is sorted by Date and Time. The third button that looks like two pages on top of each other is used to copy the event details to your Windows clipboard.I am saving up for a pony!JoseI may not quite agree with all the expressions of opinion but your post is most impressive. Below are some observations of my own on your helpful commentary on Event Viewer.Obtaining a "reasonable explanation" can be incredibly hard, even for a seasoned user of these reports.My consistent experience using Windows XP, and more recently Windows 7, is to see a number of Security Events on every log on. I have never seen an Event entry in the Internet Explorer log. The log was added long after the other logs. I have always believed this feature was never activated. Do you have evidence to the contrary?"Each event is sorted by Date and Time. " The sorting of reports is a feature controlled by the user and a list can be sorted on "any" column by clicking on the column header.You have described the copy feature in Windows XP. It has been modified for use with Windows 7 (not sure which exists in Vista).I did not know "points" conveyed any monetary reward? They may lead to gaining an award by Microsoft of MS-MVP status, which will look good on your job application / cv. I think that is as far as it goes save for a few freebies and the opportunity to go to a "binge" once a year in Seattle.I think your contribution merits acknowledgement so I will be making a contribution to your burro <G>. Regard, Gerry Cornell
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2010 5:12am

I try to put as much into one copy/paste reply as possible to answer the question and even questions that have not been asked yet.There is usually very little typing for me and that Event Viewer spiel is just a copy/paste (as is most of my other stuff). Having answered all those kinds of questions before at least once or twice, I would like to never have to type that information or have to explain it again. Often I find I need to adjust my copy/paste text to make it more clear or add to it.This is the XP forum, so I don't usually respond to questions about other operating systems (this is why I usually ask right away - what is your XP version and Service Pack. Sometimes it only comes out in some future post that the OP is not using XP. Somehow, in my fantasy world, I wold hope that one only see XP questions in the XP forum but it sometimes happens.If the "Ask a question" feature in the forums would somehow ask just a few of the fundamental "right" questions when a new thread is started - such as "What is your XP version and Service Pack", things would go a lot smoother around here, but I don't run things or I would fix that too, so I ask my own questions. Things like that would seem to be kind of important and it would be rare in the world of reality for anybody to read those "how to ask a question" things before posting a new problem.Anyway, back to Event Viewer logs.I do have a reasonable explanation for every event in every Event Viewer log on my system.I would like to have only informational messages in my Event Logs and zero warnings or errors. If I see an error, I will figure it out, fix it, or be able to explain it.I hardly look at my Event Viewer except to recreate problems other folks have in order to help understand what is wrong with their system.In my copy/paste, I try to put relevant information that will describe how to post events in a way that delivers the most information with the least amount of effort to eliminate additional back and forth posts with other questions, anticipate the usual next common questions, etc.Folks want to know things like:What does this event mean...Is it a problem and what can I do about it.I keep seeing this event or these events...My Security and Internet Explorer logs are empty, therefore I must have a problem or this must be why I can't get on the Internet. Folks don't know how to copy/paste events and need to know how if they want a good answer. They do their best to try sometimes, but you know how it goes... Instead of just saying "post the recent events from your event log", they need to know first how to get to the Event Viewer and then how to post the events so they get it right the first time and not waste message cycles and prolong the issue resolution. Stuff like that is easy for you and me, but some people have never heard of such things.If you have events in your Security and Internet Explorer logs, then some kind of security auditing or compatibility logging is enabled somewhere. Sometimes when experimenting or troubleshooting, you can turn that stuff on and forget to turn it off later. It is not a "problem" to have it on, but if you have it on "wide open" it will slow your system down. I am all about speeding things up and not wasting time. Some Googling will help you find it and understand it and then you can decide if it is doing you any good or if it is just wasting your CPU cycles. On systems that I work on, when I get done both of those logs are consistently empty and they better stay that way. Depending on what you have installed, you might have other Event Logs too - for example, PowerShell and Microsoft Office (at least the Enterprise version) has some other logs, which also better always be empty (at least for me). Some graphics cards (like ATI) have their own Event Viewer logs too.If you are not troubleshooting security issues, compatibility issues or trying to catch a crook, I think you would not need those extra logging features enabled (an empty log does not mean there is a problem). Every unnecessary open, write and close of a file is wasted I/O and wasted CPU cycles that I would rather have applied to what I am doing right now. I want every CPU cycle I can to go to my stuff, not logging some junk I will never look at. If XP has to even think about doing anything, I want it to think about my stuff and not some stuff I don't care about. Do, or do not. There is no try.I need YOUR votes and points for helpful replies and Propose as Answers. I am saving up for a pony!
December 18th, 2010 7:18am

1. There is usually very little typing for me and that Event Viewer spiel is just a copy/paste (as is most of my other stuff). 2. If the "Ask a question" feature in the forums would somehow ask just a few of the fundamental "right" questions when a new thread is started - such as "What is your XP version and Service Pack", ..... (snipped) 3. I would like to have only informational messages in my Event Logs and zero warnings or errors. If I see an error, I will figure it out, fix it, or be able to explain it.4. In my copy/paste, I try to put relevant information that will describe how to post events in a way that delivers the most information with the least amount of effort to eliminate additional back and forth posts with other questions, anticipate the usual next common questions, etc.5. If you have events in your Security and Internet Explorer logs, then some kind of security auditing or compatibility logging is enabled somewhere. 6. It is not a "problem" to have it on, but if you have it on "wide open" it will slow your system down. I am all about speeding things up and not wasting time. 7. Some Googling will help you find it and understand it .... (snipped)8. Depending on what you have installed, you might have other Event Logs too - for example, PowerShell and Microsoft Office (at least the Enterprise version) has some other logs, which also better always be empty (at least for me). Some graphics cards (like ATI) have their own Event Viewer logs too.I have inserted a snipped quote and numbered your remaining points to help you relate my responses to what you have said.1. I did appreciate you use canned responses. I do as well. I have started to modify mine as with Event Viewer the method explaining copying and the route to access the more useful logs, has changed in Windows 7.2. It does if the user starts the question from "Using Microft Answers" or from a Forum Grouping e.g. Windows XP. It does not if the user asks in a specfic forum or asks in an existing thread. It does not invite the user to specify SP1 etc. You could start a new thread in Microsoft Answers Feedback suggesting a change. It might be relatively easy to implement.3 and 4. My approach is the same as yours.5. With the Security Log your supposition could well be correct. Otherwise I asked questions when the Internet Explorer log first appeared. My recollection is that Sandi Hardmier, an MS-MVP specialising in Internet Explorer made enquiries as to how to get it to log events but these enquiries drew a blank.6. It is easy to restrict log sizes to avoid system performance issues.7. Before Googling I usually look at the EventID. net site. Getting the search criteria right is an art it takes a lot of time to learn.8. That's an area I do not recollect seeing in Windows XP. I have no entries in the Power Shell log. What generates entries?No ponies only carrots this time <G> Regards, Gerry Cornell
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2010 1:10pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics