Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Event Viewer Logging

27 Dec 2017   #1
WyattWhiteEagle

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Event Viewer Logging

I recently noticed some changes in performance after enabling all logs in Event Viewer. Is there any way possible I can get a list of the enable/disable default and customized settings for all of the logs in Event Viewer?


My System SpecsSystem Spec
.
27 Dec 2017   #2
iko22

Windows 7 x64, Vista x64, 8.1 smartphone
 
 

Hello Wyatt, if I understand your question, The technet wiki shows you how to retreive a list of all windows 7 event logs

and use the Windows Events Command Line Utility ( WEVTUTIL.exe ) from cmd prompt to interrogate each log customisation.
.
My System SpecsSystem Spec
27 Dec 2017   #3
WyattWhiteEagle

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Is there a way to get a list like this that reflects whether the files are enabled or disabled?

How may I export it as a text file?
My System SpecsSystem Spec
.

28 Dec 2017   #4
iko22

Windows 7 x64, Vista x64, 8.1 smartphone
 
 

I can get something like what you want with creating a batch file. The batch file can be created with notepad and saved to your computer, in the usual way.

The batch file assumes some D:\ drive that the user has access rights. The batch file basically outputs a list of event logs to D:\logfile.txt and then for each event log, outputs the configuration information to another list called D:\WEVLIST.TXT. The results you are looking for are in WEVLIST.TXT.

Here is the batch file (version 1.0):

Code:
 
WEVTUTIL EL > D:\LOGLIST.TXT
for /f %%A in ( D:\LOGLIST.TXT ) do WEVTUTIL GL %%A >> D:\WEVLIST.TXT
My System SpecsSystem Spec
28 Dec 2017   #5
WyattWhiteEagle

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by iko22 View Post
I can get something like what you want with creating a batch file. The batch file can be created with notepad and saved to your computer, in the usual way.

The batch file assumes some D:\ drive that the user has access rights. The batch file basically outputs a list of event logs to D:\logfile.txt and then for each event log, outputs the configuration information to another list called D:\WEVLIST.TXT. The results you are looking for are in WEVLIST.TXT.

Here is the batch file (version 1.0):

Code:
 
WEVTUTIL EL > D:\LOGLIST.TXT
for /f %%A in ( D:\LOGLIST.TXT ) do WEVTUTIL GL %%A >> D:\WEVLIST.TXT
What am I doing wrong? I used Windows Powershell and it returned the following...

Windows PowerShell
Copyright (C) 2009 Microsoft Corporation. All rights reserved.

PS C:\Users\Wyatt> WEVTUTIL EL > D:\LOGLIST.TXT
The device is not ready.
At line:1 char:14
+ WEVTUTIL EL > <<<< D:\LOGLIST.TXT
+ CategoryInfo : OpenError: (:) [], IOException
+ FullyQualifiedErrorId : FileOpenFailure

PS C:\Users\Wyatt> for /f %%A in ( D:\LOGLIST.TXT ) do WEVTUTIL GL %%A >> D:\WEVLIST.TXT
Missing opening '(' after keyword 'for'.
At line:1 char:5
+ for <<<< /f %%A in ( D:\LOGLIST.TXT ) do WEVTUTIL GL %%A >> D:\WEVLIST.TXT
+ CategoryInfo : ParserError: (OpenParenToken:TokenId) [], ParentContainsErrorRecordException
+ FullyQualifiedErrorId : MissingOpenParenthesisAfterKeyword

PS C:\Users\Wyatt>
My System SpecsSystem Spec
28 Dec 2017   #6
iko22

Windows 7 x64, Vista x64, 8.1 smartphone
 
 

Change the destination path.

Where "D:" occurs in batch file, substitute for a valid pathname or use "C:\Users\Wyatt\Desktop".
My System SpecsSystem Spec
Reply

 Event Viewer Logging




Thread Tools




Similar help and support threads
Thread Forum
Event errors (11, 7000, 7026), intellipoint and event viewer freeze.
Hi, keep getting the errors above every startup regarding; 11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications." 7000 - "The Crypkey License service...
General Discussion
After BSOD Event Viewer Logs Event ID 3012 and 3011 every time I boot
I was running 3DMark06 and got a BSOD code 124. After that every time I boot Event Viewer logs Error Codes ID 3012 and 3011. Attached are screenshots of both. I googled this and found two different threads where someone suggested to rebuild the performance counters. Both responses were...
BSOD Help and Support
WHEA-Logger event 18/19 errors in Event Viewer (W7 Home Premium)
Hi, I was hoping somebody could offer an insight on the below, as searching around I've not found much to go on other than "overheating" Basically my laptop has been having very high temperatures for a long time (usually ~60C for CPU and often 100-110 for GPU...insanely high, in other words)...
Hardware & Devices
Event Viewer Pros, Disable PrintService Logging Question
I ran across a way to disable SChannel from logging an error message in event viewer. I there a way to get PrintService to do the same? Everytime I print I get an error in event viewer ________________________________________________________ Level-Error Source-PrintService Event ID-372 The...
General Discussion
Event Viewer Network Logging...
Does event viewer log when computers on the network boot up (when they join the network)? If so, which node is it under for the event log? If not, is there a program that can do this? Thanks
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 20:58.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App