Clear All Event Logs in Event Viewer in Windows  

Page 3 of 11 FirstFirst 12345 ... LastLast

  1. Posts : 287
    windows 10 pro 64
       #20

    Brink said:
    Hello drugo,

    The event logs are stored in the folder below. :)

    %SystemRoot%\System32\Winevt\Logs
    Hi Brink
    thanks a lot

    is there an utility to open these logs taken for example from an image?
    i mean i would like to mount an image made some days ago , save this folder from the image to H:\event
    is there a program that can open them ?
    my event viewer can't do it , there is no any load features
    just to track when the error did appear

    thanks again Brink , always the number 1


    ps i tried to post a link , but i guess it's against the rules ,isn't it?
      My Computer


  2. Posts : 61,552
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #21

    Sure you, could mount the image file, then be able to access and open them as usual.
      My Computers


  3. Posts : 287
    windows 10 pro 64
       #22

    Brink said:
    open them as usual.
    Hi
    but if i open myeventview it points to the%SystemRoot%\System32\Winevt\Logs , and not to my image
    need a program to open them
      My Computer


  4. Posts : 26,345
    Win11 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       #23

    drugo said:
    Hi
    but if i open myeventview it points to the%SystemRoot%\System32\Winevt\Logs , and not to my image
    need a program to open them
    @drugo I think he means on the mounted image,
    find C:\WINDOWS\System32\Winevt\Logs,
    then you just double click the the log you want to view and Event Viewer should open up so you can read it.

    When you mount it, make sure you give access to restricted folders, and make it writable(the writable only happens in memory and doesn't make any permanent changes).
    ***Note: Some logs are just plain empty.***

    Here is a quick screen capture I just made to show you. It's not meant to be a video tutorial, but should give you an idea of how to do it, I hope it get's you further:)

    ***I just fixed the video a bit, and added a small explanation of what to do.***

    Last edited by Cliff S; 10 Apr 2016 at 06:17. Reason: Changed video address to updated version
      My Computers


  5. Posts : 287
    windows 10 pro 64
       #24

    Cliff S said:
    @drugo I think he means on the mounted image,
    find C:\WINDOWS\System32\Winevt\Logs,
    then you just double click the the log you want to view and Event Viewer should open up so you can read it.

    When you mount it, make sure you give access to restricted folders, and make it writable(the writable only happens in memory and doesn't make any permanent changes).
    ***Note: Some logs are just plain empty.***

    Here is a quick screen capture I just made to show you. It's not meant to be a video tutorial, but should give you an idea of how to do it, I hope it get's you further:)
    Hi Cliff
    Amazing!!!!!
    thanks a lot!
    can i download the youtube video ?
      My Computer


  6. Posts : 26,345
    Win11 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       #25

    You're welcome drugo!
    I'm glad it helped.
    You should be able to. I'm new at posting on YouTube, so if you can't, let me know what I need to set, so it can be.
      My Computers


  7. Posts : 26,345
    Win11 Pro, Win10 Pro N, Win10 Home, Windows 8.1 Pro, Ubuntu
       #26

    @Brink,
    Hey Shawn, I've been messing around now with the mounted Macrium image option for a bit.
    Even though it say "Make writable Note: Changes are temporary and will be discarded", I have found out, you can copy from the mounted image, and paste into the "host".

    This might come in useful to repair something, or get an installer(like maybe a driver or 3rd party program, you need to repair or reinstall without have to reimage and loose current updates and changes. I have successfully copy & pasted .dlls and other system files.

    It might be worth a tutorial, for non invasive repairs. Or, would this be more of something, for the video geeks?
      My Computers


  8. Posts : 61,552
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #27

      My Computers


  9. Posts : 56,058
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #28

    Cliff S said:
    @Brink,
    Hey Shawn, I've been messing around now with the mounted Macrium image option for a bit.
    Even though it say "Make writable Note: Changes are temporary and will be discarded", I have found out, you can copy from the mounted image, and paste into the "host".

    This might come in useful to repair something, or get an installer(like maybe a driver or 3rd party program, you need to repair or reinstall without have to reimage and loose current updates and changes. I have successfully copy & pasted .dlls and other system files.

    It might be worth a tutorial, for non invasive repairs. Or, would this be more of something, for the video geeks?
    Brink said:
    @Cliff S, @Brink - Just an add-on... Same procedure can be used on a Restore Point. A small utility System Restore Explorer | Nics Blog can be used to mount a Restore Point. Copy/paste to host any file in the restore point, user data, system data, etc. Delete the Restore Point if desired. Just thought I'd pass it on. TC
    Last edited by f14tomcat; 21 Apr 2016 at 09:11.
      My Computers


  10. Posts : 61,552
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #29

    Thank you. :)
      My Computers


 

Tutorial Categories

Clear All Event Logs in Event Viewer in Windows Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:02.
Find Us




Windows 10 Forums