1.    31 May 2016 #1
    Join Date : May 2016
    Posts : 38
    Win10

    I would like to reset all my event logs to default


    By mistake, I have executed a wrong command (SL /e:false to disable all event logging instead of clearing it. Got it from another website ).

    Now I would like to reset all my event logs to default.
    Has someone an idea, how I could apply the steps from this article:
    Reset an event log to default settings: Management Services (which is for Windows Server only!)
    to my Windows 10 machine?
      My ComputerSystem Spec
  2.    31 May 2016 #2
    Join Date : Oct 2014
    Arnold, MD
    Posts : 29,739
    Triple boot - Win 10 Pro, Win 10 Pro Insider (2) - (and a sprinkling of VMs)

    Quote Originally Posted by WTenNewbie View Post
    By mistake, I have executed a wrong command (SL /e:false to disable all event logging instead of clearing it. Got it from another website ).

    Now I would like to reset all my event logs to default.
    Has someone an idea, how I could apply the steps from this article:
    Reset an event log to default settings: Management Services (which is for Windows Server only!)
    to my Windows 10 machine?
    WTenNewbie... what was the exact command you entered, the full command?
      My ComputersSystem Spec
  3.    31 May 2016 #3
    Join Date : May 2016
    Posts : 38
    Win10
    Thread Starter

    Code:
    for /f "delims=" %%a in ('WEVTUTIL EL') do WEVTUTIL SL "%%a" /e:false
    I get dozens of errors, if I try the same line with ... /e:true
      My ComputerSystem Spec
  4.    31 May 2016 #4
    Join Date : Apr 2014
    Space coast of Florida
    Posts : 5,382
    Windows 10 Pro X64 16299.19

    I use the batch file from Brinks tutorial here: Event Viewer - Clear All Event Logs in Windows - Windows 10 Forums
      My ComputersSystem Spec
  5.    31 May 2016 #5
    Join Date : Oct 2013
    Penns Forrest
    Posts : 3,506
    Win_8.1-Pro, Win_10.1607-Pro, Mint_17.3

    Quote Originally Posted by WTenNewbie View Post
    Code:
    for /f "delims=" %%a in ('WEVTUTIL EL') do WEVTUTIL SL "%%a" /e:false
    Is this command in a batch file or are you entering it in Command Prompt?

    I would expect errors if you try to enter it in Command Prompt

    In a batch file

    for /F "tokens=*" %%a in ('wevtutil.exe el') DO wevtutil.exe cl "%%a"

    Typed in Command Prompt

    for /F "tokens=*" %1 in ('wevtutil.exe el') DO wevtutil.exe cl "%1"

    Note the difference in the percent signs (batch=%% ... typed=%)
    The difference in the variable names 1 and a is irrelevant, they could both be anything else x, y, or z.

    Your example seems to have missed something - the asterisk
    for /f "delims=" %%a
    should be
    for /f "delims=*" %%a

    I'm not sure you actually changed anything - but if you saw things did get changed, then I would just enable everything. Why? Because I don't know the defaults for all of the event listeners ... maybe another member knows.
      My ComputerSystem Spec
  6.    01 Jun 2016 #6
    Join Date : May 2016
    Posts : 38
    Win10
    Thread Starter

    A command in a batch file. The main difference is the SL (set-log) instead of CL (clear-log).
    Enable everything is - as mentioned - not possible due to the many errrors.
      My ComputerSystem Spec
  7.    01 Jun 2016 #7
    Join Date : Oct 2013
    Penns Forrest
    Posts : 3,506
    Win_8.1-Pro, Win_10.1607-Pro, Mint_17.3

    Quote Originally Posted by WTenNewbie View Post
    A command in a batch file. The main difference is the SL (set-log) instead of CL (clear-log).
    Enable everything is - as mentioned - not possible due to the many errors.
    Thanks
    I guess that's what I'm saying then - if Enable everything is impossible due to the errors, then the Disable Everything failed the same way. I can't tell from this side of your monitor.

    You might want to check a few categories to see if they are enabled or disabled
    In event Viewer,
    Right-click the log (operational),
    Select Properties
    If Enable Logging is checked, then the disable that you ran did not take effect due to the errors.
    Click image for larger version. 

Name:	evtLogEnabled.PNG 
Views:	9 
Size:	746 Bytes 
ID:	82760

    Good eyes - I missed that subtle but important distinction

    Did try it with the correct selection criteria?

    "delims=*"

    If you still get errors, please post a screen shot or copy the output from the Command Prompt window
    - thanks
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Performance & Maintenance Clear All Event Logs in Event Viewer in Windows
How to Clear All Event Logs in Event Viewer in Windows Event Viewer is a tool that displays detailed information as event logs about significant events on your PC. Event logs are special files that record significant events on your PC, such as...
Tutorials
Apps & Features Fix An app default was reset Error in Windows 10
How to Fix 'An app default was reset' Error in Windows 10 You may get a notification that states An app default was reset along with An app caused a problem with the default app setting for xxx files, so it was reset to xxx built-in app. ...
Tutorials
'An app default was reset' revisted
Today, again, I got several 'An App Default Was Reset' notifications again, after I went thru great length to stop MS from doing this, up and including a rather Draconian registry patch: ...
Software and Apps
Computer Hard Freezing - No Event Logs or Memory Dumps
Originally posted on Sevenforums, and reposted into the right forum thread. The freezing mostly occurs after the computer has been left in sleep mode for an extended period of time - Even if restarted, the computer will still freeze ~5...
General Support
Windows logs automatically logs into last user
I just upgraded my PC to windows 10 and have already seen my first issue. I have two user accounts on my computer. Neither of them have passwords. In Windows 7 it would load up windows and give me the option to select the user I want to sign into....
User Accounts and Family Safety
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 08:57.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums