The is another attempt at getting this answered.
Previous replies noted that the Administrative Events under the Custom view was just a compilation of all the other logs.
I do not belive this is entirely correct as all the events in this log concern the operating system and do NOT appear in the other logs such as Application, Security, etc.
Below is an example of what is showing up on my system after all the individual logs shown under Event Viewer are cleared:
Level |
Date and Time |
Source |
Event ID |
Task Category |
Warning |
8/27/2015 13:59 |
Microsoft-Windows-DNS-Client |
1014 |
None |
Error |
8/27/2015 12:56 |
Microsoft-Windows-Kernel-EventTracing |
2 |
Session |
Error |
8/27/2015 12:56 |
Microsoft-Windows-Dhcp-Client |
1001 |
Address Configuration State Event |
Error |
8/27/2015 12:54 |
Microsoft-Windows-PrintService |
315 |
Sharing a printer |
Error |
8/24/2015 9:15 |
Microsoft-Windows-Dhcp-Client |
1001 |
Address Configuration State Event |
Error |
8/24/2015 9:13 |
Microsoft-Windows-PrintService |
315 |
Sharing a printer |
Error |
8/20/2015 3:19 |
Microsoft-Windows-Dhcp-Client |
1001 |
Address Configuration State Event |
Error |
8/20/2015 3:17 |
Microsoft-Windows-PrintService |
315 |
Sharing a printer |
Error |
8/17/2015 10:24 |
Microsoft-Windows-Dhcp-Client |
1001 |
Address Configuration State Event |
Error |
8/17/2015 10:22 |
Microsoft-Windows-PrintService |
315 |
Sharing a printer |
Error |
8/17/2015 10:13 |
Microsoft-Windows-Dhcp-Client |
1001 |
Address Configuration State Event |
There are over 2000 of these events remaining after all the logs were cleared dating back to January of 2011 when I bought the computer.
So once again, How do I clear these logs? A command line method is fine as long as somebody can tell me the actual log name to use.
Seren
- Edited by Seren_verch_Dafydd 12 hours 25 minutes ago