Windows 10: How can I "Un-Edit" default view in Custom Views of the Event Editor

Page 1 of 2 12 LastLast
  1.    08 Jun 2017 #1

    How can I "Un-Edit" default view in Custom Views of the Event Editor


    Hello all. Seems like I have managed to screw up the default "Administrative Events" in the Custom Views section of the Event Viewer. I filtered it for warnings, etc., intending to save as a new definition, but in fact managed to apply the filter to the default definition itself. Doh! Now, I can't unfilter or delete it - the options are greyed out in the editor. Anyone know how to reset that item to default?

    Using build 1703. Must be a bug that permitted me to edit that view in the first place?
      My ComputerSystem Spec

  2. pepanee's Avatar
    Posts : 1,056
    Windows 10 Professional
       08 Jun 2017 #2

    Can you take a screen shot of the greyed out thing you're talking about?
      My ComputerSystem Spec

  3.    08 Jun 2017 #3

    Try changing the Table View Event Viewer - How To
      My ComputerSystem Spec

  4.    08 Jun 2017 #4

    pepanee said: View Post
    Can you take a screen shot of the greyed out thing you're talking about?
    Under Custom views of the Event Viewer: Right click Administrative Events => Properties => Edit Filter and you should get a read only Custom View Properties window. But somehow, in my case I inadvertently edited it before it became read only, and I can't see how to get back the default.

    Click image for larger version. 

Name:	image.png 
Views:	9 
Size:	580.4 KB 
ID:	138608
    @spunk - Not clear how to do that. There's no "User Preferences" in the Win 10 Control Panel. Where is the "CommCell Console" ? But sure, I can make my own custom unfiltered view - which I did (see screen capture.) I'm just wondering how to reset the default. And why Win10 let me edit it in the first place.
      My ComputerSystem Spec

  5. pepanee's Avatar
    Posts : 1,056
    Windows 10 Professional
       08 Jun 2017 #5

    Same thing applies here.

    I'm assuming it's a custom setting that Microsoft has made that is un-editable.
    Check out my picture:
    Click image for larger version. 

Name:	Event Viewer.png 
Views:	5 
Size:	324.4 KB 
ID:	138609
      My ComputerSystem Spec

  6.    09 Jun 2017 #6

    pepanee said: View Post
    I'm assuming it's a custom setting that Microsoft has made that is un-editable.
    .......
    Ah, but you did edit it. That's the point. We just can't UN-edit it. In C:\ProgramData\Microsoft\Event Viewer\Views one finds an .xml file definition for each user-created custom view, but no definition for this default "custom view." So how did WIN 10 let us edit it? A small mystery. I've searched my drive for a string of text that I'd entered in the description field. Registry too. No luck. It must be encoded somewhere.
      My ComputerSystem Spec

  7. pepanee's Avatar
    Posts : 1,056
    Windows 10 Professional
       09 Jun 2017 #7

    I've never created that custom thing; It was already there. I had to figure out what you did to make my screen shot look like yours. After I set it all up to take the screen shot, I noticed that it looks exactly like yours. I've never touched that Event Viewer thing, I've only glanced at the errors in there a few times only; never made modifications.

    But yea, try searching online on ways to alter it.
      My ComputerSystem Spec

  8.    09 Jun 2017 #8

    I don't have my Win10 machine handy to check right now, but I checked my Win7Pro C:\ProgramData\Microsoft\Event Viewer\Views folder and found nothing but an empty C:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode folder (no .xml files). I don't think I've ever customized the view, as I usually use NirSoft's MyEventViewer (much simpler and more flexible for my needs).

    Could it be that the custom .xml file(s) you have are created only when you customize the view, & otherwise Windows uses its own default view? Given the ProgramData path, I'm guessing the folder would only contain data/settings generated by User usage. Perhaps you could check that by temporarily moving or renaming the existing .xml file(s) and seeing if the view reverts to default. (...might require a reboot but I'm guessing not)
      My ComputerSystem Spec

  9.    09 Jun 2017 #9

    pepanee said: View Post
    I've never created that custom thing; It was already there. .............
    Gad, my apologies. I was so sure that when I first looked to edit that view, it had no check marks at all; IOW, that it gave ALL events. Now I see your check pattern is the same as mine, and so is your description. Could've sworn I'd changed mine, but guess not. Too many hours dealing with a crashed boot drive I guess.

    Perhaps someone else could confirm that the "three checks" template is the default, but I apologize for even starting this thread.
    @gdv - Yes, an XML file is created when you create a new custom event profile.
      My ComputerSystem Spec

  10. pepanee's Avatar
    Posts : 1,056
    Windows 10 Professional
       09 Jun 2017 #10

    I completely understand. There's so much complexity in so much stuff with this OS, that anyone can easily get lost. Yes, it is best if somebody else can also confirm that what they're seeing is also the same.
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
Hi :), I open Windows Event Viewer often (most days) to take a look for entries in the Windows 10 created Filter Custom Views> ServerRoles> Administrative Events. (especially as my Win 10Pro (x64) is newly installed)What I wish to seek advice on...
I have many folders that are Adobe Ill, Adobe Photoshop and Flexi with big files. I want to change the default view for my pictures folder including its sub folders, but not every folder because it slows it way down trying to come up with a icon...
Default Folder Views in Customization
Hi, could someone explain why the default for most folders and subfolders is the Icon view and why its so hard change that view to something else permanently? For instance My Pictures, you can right click My Pictures / customize / "optimize this...
how do I do this? for attempted troubleshooting a horribly slow black-screen boot situation I imported a worthless "custom view" in Event Logging. How do I undo that? countless MS articles on how to create and "work with" but none clearly say...
file edit view etc in Browsers and Email
Using Bing, can you get like file,edit, view? On internet exployer I got these by pressing Alt and right click at toolbars. thanks carol
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 20:51.
Find Us