How To Clear Administrative Events Log - Event Viewer

[ColTom2]

Hi:

Does anyone know how to clear the Administrative Events log listed under Custom Views in the Event Viewer?

All the logs listed under the Windows logs have options to clear, but the above does not.

Thanks,

ColTom2

 

[Disk4mat]

Thats just a filter. I dont know of any way to clear it other than clearing all events that appear in it under: System, Security and Application event logs.

 

[ColTom2]

Well apparently they are cummulative and just keep adding on each day. Surely there must be some simple manner in which to clear these Administrative Events.

Or is there a max number that will be allowed to appear or will they just go on to an infinte number?

Thanks,

ColTom2

 

[Disk4mat]

Events are recorded all the time. Constantly. What your looking at is a filter comprised of events from numerous logs/sources. I dont know of any way to remove the filter. But even if it could be removed, the events will still be recorded.

There are max number/log sizes for every log. The filter from what I can tell has no limit. You can adjust the limit (max size) for individual logs.

 

[Greg S]

Hi:

Does anyone know how to clear the Administrative Events log listed under Custom Views in the Event Viewer?

All the logs listed under the Windows logs have options to clear, but the above does not.

Thanks,

ColTom2

I've tried this and it works to do what you are asking. Save the code as .bat and run it. I'll try and search for the source and post back with it.

@echo off
FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
IF (%adminTest%)==(Access) goto noAdmin
for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
echo.
echo Event Logs have been cleared! ^<press any key^>
goto theEnd
:do_clear
echo clearing %1
wevtutil.exe cl %1
goto :eof
:noAdmin
echo You must run this script as an Administrator!
echo ^<press any key^>
:theEnd
pause>NUL

 

[ColTom2]

Hi Greg:

Running the batch file as you provided did the trick, as it cleaned out all Administrative Event Log entries. Wonder what else it cleaned out....

Thanks,

Co;Tom2

 

[Zardoc]

Hi Coltom,

There is a tutorial in this forum for this and a way to run in admin mode.

HERE

 

[Greg S]

Hi Greg:

Running the batch file as you provided did the trick, as it cleaned out all Administrative Event Log entries. Wonder what else it cleaned out....

Thanks,

Co;Tom2

Do a search for wevtutil.exe and one of the MS related sites should be near the top listing. It's a tool for managing event logs

 

[Zardoc]

The tutorial that I give shows what is being cleared. Basically just anything in the event viewer.

 

[seth500]

Nicely done the batch file runs perfectly!

 

[peterdarwin]

How to clear events viewer.

Hi

To clear events log, go to the following webpage and Download the Tool to your desktop and run as Administrator, then close the event log and re-open and the events log should be clear.

http://www.sevenforums.com/tutorials/25480-event-viewer-one-click-clear.html

 

[teligence]

Whines get better with age?

OK, not whining- Just expressing appreciation that threads like this are still maintained. This issue isn't critical for me, but it was still a nuisance seeing all those Administrative Events that I couldn't delete directly from the list.

I tried the script provided by Greg S and it worked beautifully! Thank you! Happy Camper and all that...

 

[saidurcse]

View the Windows events by Event Log Explorer

1. Try Event Log Explorer , it's free for personal use.
2. If you need to clear a log on a local computer, this computer will be listed in the tree.
If you need to clear a log on a remote computer, add this computer by pressing Add computer button.
3. Double click on the computer in the tree to expand event logs.
4. Find the log you need to clear, click right mouse button on it and select clear.
5. Confirm clearing.
6. Double click on the log to open it to make sure thay the log contains no events.

 

[Severity7]

It's a long time since I looked at any code.
Can anyone add comments to each lin of this code to help me understand
how it works?

@echo off
FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
IF (%adminTest%)==(Access) goto noAdmin
for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
echo.
echo Event Logs have been cleared! ^<press any key^>
goto theEnd
:do_clear
echo clearing %1
wevtutil.exe cl %1
goto :eof
:noAdmin
echo You must run this script as an Administrator!
echo ^<press any key^>
:theEnd
pause>NUL