Edited by jcallis, 06 July 2005 - 05:13 AM.
How to ignore certain events in event viewer
Posted 06 July 2005 - 05:13 AM
Posted 06 July 2005 - 08:27 AM
Also can u mention the event source for which U want to stop logging events; I will check to see if that source has multiple event-ids or not. If it is the latter case(i.e. the source has only one event id) we can safetly stop logging according to source.
Edited by darth_ash, 06 July 2005 - 08:35 AM.
Posted 06 July 2005 - 09:07 AM
Note: For the other steps, I have used the some variables, they are defined below:
xxxx: Type of log; i.e. either Application, Security or System
yyyy: The name of the source that generated the event as seen seen in "Event Viewer". e.g.: Userenv, MsiInstaller,
2) Go to "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\xxxx"
Double-click on the Sources value, to open the edit dialog. Remove the Source name from the list (i.e. yyyy).
3) Again in,"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\xxxx" Delete the yyyy key(sub-folder).
P.S: If u find it difficult to understand i will give u an example.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users