How does one clear Custom Views (Administrative Events) in the Event Viewer?
Windows Logs and Applications and Services Logs have a "clear log" option; however, I am puzzled how to edit/delete Administrative Events?Eighter from Decatur, county seat of Wise (of course it's in Texas)
January 17th, 2009 8:30am

Hi p010neThe Custom View / Administrative Events is a compilation of all the other event logs in the Event Viewer. Entries in this log will be removed when the logwhere the event originated from is cleared.Hope this helps. Ronnie Vernon MVP
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2009 9:27am

Ronnie Vernon said: Hi p010neThe Custom View / Administrative Events is a compilation of all the other event logs in the Event Viewer. Entries in this log will be removed when the logwhere the event originated from is cleared.Hope this helps. Ronnie Vernon MVPI thought that was the case; however, I cleared all the other logs! This is an example of an entry in this log:Log Name: Microsoft-Windows-Dhcpv6-Client/AdminSource: Microsoft-Windows-DHCPv6-ClientDate: 1/17/2009 7:52:33 AMEvent ID: 1001Task Category: Address Configuration State EventLevel: ErrorKeywords: User: LOCAL SERVICEComputer: Windows7Description:Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x000129F558C5. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System> <Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" /> <EventID>1001</EventID> <Version>0</Version> <Level>2</Level> <Task>3</Task> <Opcode>74</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2009-01-17T13:52:33.858398400Z" /> <EventRecordID>202</EventRecordID> <Correlation /> <Execution ProcessID="1088" ThreadID="864" /> <Channel>Microsoft-Windows-Dhcpv6-Client/Admin</Channel> <Computer>Windows7</Computer> <Security UserID="S-1-5-19" /></System><EventData> <Data Name="HWLength">6</Data> <Data Name="HWAddress">000129F558C5</Data> <Data Name="StatusCode">121</Data></EventData></Event>When I search for "Microsoft-Windows-DHCPv6-Client" I do not find that file?OK, I found the entrys in the Microsoft section (DHCPv6-Client) and am able to clear them there!Eighter from Decatur, county seat of Wise (of course it's in Texas)
January 17th, 2009 5:18pm

I have this same problem and am unable to clear the administrative events in custom view because they only appear in the administrative events log and not in any of the windows logs, applications and services logs, or microsoft logs. All of the errors shown are DHCP Client. Is there another way to clear a custom view or stop logging dhcp events?
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 7:16am

You need to create your own thread and then state your quesion. You have tailgated upon a post that's over two years old!Carey Frisch
July 13th, 2011 7:27am

i have the same problem and it is still a problem in 2011 dr Karron (drdbkarron) on facebook and drdbkarron@gmail.com
Free Windows Admin Tool Kit Click here and download it now
August 14th, 2011 11:40pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics