Event Viewer One Click Clear

How to Clear Event Viewer with One Click in Windows​

   Information

This will show you how to create a command line shortcut that will clear all of the Event Viewer logs in one click.

Here is a batch file that can help you clear the event viewer in one click.

Download


Download this file above..

Unzip on your desktop.

You can use the task scheduler to give it a high priority so you won't get a UAC prompt

See Brink's Tip HERE

Or, just copy this script and paste in notepad and save as Clean Viewer.BAT

Right click, and click on Run as administrator to run the file

@echo off
FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
IF (%adminTest%)==(Access) goto noAdmin
for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
echo.
echo goto theEnd
:do_clear
echo clearing %1
wevtutil.exe cl %1
goto :eof
:noAdmin
exit

Related Tutorials

---

• How to Clear all Event Logs in Event Viewer using Windows PowerShell
• How to Setup Event Viewer in Vista and Windows 7 to Send a Email Notification
• Filtering and Creating Custom Event Views for System Monitoring

 

[vsrawat]

Have used the useful script many times.

There are 5 types of Events - Critical/ Error/ Warning/ Information/ Audit Success

Any method that we can retain, say, Critical and, maybe, Error, that are crucial for diagnosing problems in future, and can delete rest of the types that are informative?

How can we just stop Audit success type of events from getting recorded in event logs?

Thanks.
--

 

[Mirfster]

VBS Version

First of all, thanks for the great batch files. Just wanted to add a VBS version that I created to do the same in case anyone was interested in it.

Please note, this does not have any checking for Admin rights, but that is since I usually have these running via a Software Delivery System (MDT, SCCM, etc) or are part of my MDT Applications.

On Error Resume Next

'Define and configure objects
Set WshShell = CreateObject("WScript.Shell")
Set WshShellExec = WshShell.Exec("%ComSpec% /C WEvtUtil.exe EL")
WshShellExecOutPut = WshShellExec.StdOut.ReadAll

'Read each line and clear the event logs 
For Each EventLog in Split (WshShellExecOutPut, VBNewLine)
    WScript.Echo "Clearing: " & EventLog
    WshShell.Run "WEvtUtil.exe CL " & EventLog, 0, TRUE
Next

 

[Brink]

Hello Mirfster, and welcome to Seven Forums.

No problem. Here's your .vbs with a UAC prompt for elevation added to it.

'UAC prompt for elevation
If WScript.Arguments.Count = 0 Then
     Set objShell = CreateObject("Shell.Application")
     objShell.ShellExecute "wscript.exe", Chr(34) & WScript.ScriptFullName & Chr(34) & " Run", , "runas", 1
Else
 
On Error Resume Next
 
'Define and configure objects
Set WshShell = CreateObject("WScript.Shell")
Set WshShellExec = WshShell.Exec("%ComSpec% /C WEvtUtil.exe EL")
WshShellExecOutPut = WshShellExec.StdOut.ReadAll
 
'Read each line and clear the event logs 
For Each EventLog in Split (WshShellExecOutPut, VBNewLine)
    [B][COLOR=red]WScript.Echo "Clearing: " & EventLog[/COLOR][/B]
    WshShell.Run "WEvtUtil.exe CL " & EventLog, 0, TRUE
Next
 
End If

 

[Mirfster]

Thanks Brink, that is a nice addition.

 

[Brink]

You're welcome.

I'd recommend to remove the line below to not have to click on OK for each log cleared. Only a few million of them.

WScript.Echo "Clearing: " & EventLog

Maybe this instead:

'UAC prompt for elevation
If WScript.Arguments.Count = 0 Then
     Set objShell = CreateObject("Shell.Application")
     objShell.ShellExecute "wscript.exe", Chr(34) & WScript.ScriptFullName & Chr(34) & " Run", , "runas", 1
Else
 
On Error Resume Next

'Define and configure objects
Set WshShell = CreateObject("WScript.Shell")
Set WshShellExec = WshShell.Exec("%ComSpec% /C WEvtUtil.exe EL")
WshShellExecOutPut = WshShellExec.StdOut.ReadAll

'Read each line and clear the event logs 
For Each EventLog in Split (WshShellExecOutPut, VBNewLine)
        WshShell.Run "WEvtUtil.exe CL " & EventLog, 0, TRUE
Next
 
End If
 
[B][COLOR=red]MsgBox "Event Viewer logs have been successfully cleared."[/COLOR][/B]

 

[Mirfster]

Actually, I just left that in there so that when it is being ran via "CScript.exe" it shows progress. The code I provided is actually a snippet from my VBS that I use to prepare my base image.

I see what you mean though if it were to be launched via "WScript.exe".

 

[Rockit]

Hi Everyone,

Has a final and best version been decided?

Thank You

 

[Brink]

Hello Rockit,

Either option in the tutorial does the same thing. It's just a matter of which one you would like to use.

 

[Captain Zero]

Just the thing I was looking for, thanks!

 

[m4paws]

Great tool, thanks very much. I've become a bit OCD about no errors on boot up, so this really comes in handy

 

[jonnyhillow]

Used the Event viewer tutorial to clear logs/ have question.

Ho folks , I have another thread but it's not the same question, I followed the Event viewer tutorial but got the below result.

Any ideas

Thank you

 

[sgmdew]

Have tried this bat file (as admin) with no success, anyone got a script that will work, thanks

 

[Brink]

Hello sgmdew, and welcome to Seven Forums.

What issue did you have?

Did you run the .bat using Run as administrator?

 

[Slartybart]

After you help Brink understand the issue you are experiencing (which might help improve this tutorial) you can try an alternate method of clearing all events using powershell
See: http://www.sevenforums.com/tutorials/320451-event-viewer-clear-all-events.html

 

[sgmdew]

Hello sgmdew, and welcome to Seven Forums.

What issue did you have?

Did you run the .bat using Run as administrator?

Ran as admin, tried the wevtutil.exe, powershell, and all other bat files I could find but none clear my event viewer or other logs. It must be something wrong that I can't delete any of the logs information, thanks.

 

[Brink]

Are you getting an error message?

 

[sgmdew]

Are you getting an error message?

No the bats just don't clear the log entries.

 

[Brink]

I'm not sure why the downloaded .bat is not clearing the Event Viewer logs for you.

I just downloaded the .zip file, extracted (drag and drop) the .bat to my desktop, right clicked on the .bat, clicked on "Run as administrator", and approved.

It cleared all logs in Event Viewer minus the 5 new entries in "Windows Logs" -> "System" showing the log clear, and any new entries afterwards.

 

[sgmdew]

I'm not sure why the downloaded .bat is not clearing the Event Viewer logs for you.

I just downloaded the .zip file, extracted (drag and drop) the .bat to my desktop, right clicked on the .bat, clicked on "Run as administrator", and approved.

It cleared all logs in Event Viewer minus the 5 new entries in "Windows Logs" -> "System" showing the log clear, and any new entries afterwards.

Well it is not clearing mine so was looking for something else to do; running the wevtutil cmd came up with not a valid cmd name. At a loss on how to clean the logs out other than manually but admin log still full.

 

[Callender]

Clean Event Logs

I use Zardoc's original batch file compiled as an executable!


View attachment LogCleaner.zip