I would like to reset all my event logs to default

WTenNewbie said:

By mistake, I have executed a wrong command (SL /e:false to disable all event logging instead of clearing it. Got it from another website ).

Now I would like to reset all my event logs to default.
Has someone an idea, how I could apply the steps from this article:
Reset an event log to default settings: Management Services (which is for Windows Server only!)
to my Windows 10 machine?

WTenNewbie... what was the exact command you entered, the full command?

I use the batch file from Brinks tutorial here: Event Viewer - Clear All Event Logs in Windows - Windows 10 Forums

WTenNewbie said:

Code:

for /f "delims=" %%a in ('WEVTUTIL EL') do WEVTUTIL SL "%%a" /e:false

Is this command in a batch file or are you entering it in Command Prompt?

I would expect errors if you try to enter it in Command Prompt

In a batch file

for /F "tokens=*" %%a in ('wevtutil.exe el') DO wevtutil.exe cl "%%a"

Typed in Command Prompt

for /F "tokens=*" %1 in ('wevtutil.exe el') DO wevtutil.exe cl "%1"

Note the difference in the percent signs (batch=%% ... typed=%)
The difference in the variable names 1 and a is irrelevant, they could both be anything else x, y, or z.

Your example seems to have missed something - the asterisk
for /f "delims=" %%a
should be
for /f "delims=*" %%a

I'm not sure you actually changed anything - but if you saw things did get changed, then I would just enable everything. Why? Because I don't know the defaults for all of the event listeners ... maybe another member knows.

WTenNewbie said:

A command in a batch file. The main difference is the SL (set-log) instead of CL (clear-log).
Enable everything is - as mentioned - not possible due to the many errors.

Thanks
I guess that's what I'm saying then - if Enable everything is impossible due to the errors, then the Disable Everything failed the same way. I can't tell from this side of your monitor.

You might want to check a few categories to see if they are enabled or disabled
In event Viewer,
Right-click the log (operational),
Select Properties
If Enable Logging is checked, then the disable that you ran did not take effect due to the errors.


Good eyes - I missed that subtle but important distinction

Did try it with the correct selection criteria?

"delims=*"

If you still get errors, please post a screen shot or copy the output from the Command Prompt window
- thanks