Event Viewer

Is there any way to clear the items listed in 'administrative events' in event viewer? TIA, Richard

You can execute attached batch script to delete all event logs. Make sure to execute the batch script as a administrator.

Hi,

Double click any event in the admin log and choose "delete". That will clear it.

Cheers,

Thanks for the reply FreeBooter. If I run the batch script, will it remove all the events? My main concern is in administrative events. I had a corrupt file that was issuing critical events every 10 seconds or so. It accumulated thousands of events. Once I fixed the file, the critical events stopped.
PS fdegrove: when I double click on a particular event, it just opens a details box pertaining to the event. Even so, it would take me forever to do them one at a time. But thanks anyway for your response.

RichardC said:

Thanks for the reply FreeBooter. If I run the batch script, will it remove all the events? My main concern is in administrative events. I had a corrupt file that was issuing critical events every 10 seconds or so. It accumulated thousands of events. Once I fixed the file, the critical events stopped.
PS fdegrove: when I double click on a particular event, it just opens a details box pertaining to the event. Even so, it would take me forever to do them one at a time. But thanks anyway for your response.

Yes batch script will delete all event logs even administrative event logs are deleted.

Hi,
@RichardC :

PS fdegrove: when I double click on a particular event, it just opens a details box pertaining to the event. Even so, it would take me forever to do them one at a time. But thanks anyway for your response.

Selecting one event and double clicking it will allow you to delete not just that one but actually clear the admin log in a single go.

Cheers,

fdegrove said:

Hi,
@RichardC :



Selecting one event and double clicking it will allow you to delete not just that one but actually clear the admin log in a single go.

Cheers,

When I double click on an event, I don't have the option to delete. Only Copy and Close.

"Administrative Events" is a predefined filter showing events from a number of logs; you can only clear those by clearing the associated individual event logs, which you may not want to do. I would recommend to leave well enough alone, unless you want to clear all the associated logs. You can also backup the logs and save them to event files before deleting them.

If you are planning an in place upgrade repair to move from 1703 to 1709 that will also clean the events.

Hi,
@Clint: I made a mistake, it's "Event Viewer Local" that you can clear that way, not the "Administrative Events" log. Sorry about that.

Cheers,