Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

How to ignore certain events in event viewer


  • Please log in to reply

#1
jcallis

jcallis

    Member

  • Member
  • PipPip
  • 13 posts
On windows server 2000 how can you tell the event viewer to ignore and not log certain event id's?

Edited by jcallis, 06 July 2005 - 05:13 AM.

  • 0

Advertisements


#2
darth_ash

darth_ash

    Member 1K

  • Member
  • PipPipPipPip
  • 1,382 posts
Wait to see if, u get other replies, otherwise I can give u a method to stop logging events according to the source not event-id.
Also can u mention the event source for which U want to stop logging events; I will check to see if that source has multiple event-ids or not. If it is the latter case(i.e. the source has only one event id) we can safetly stop logging according to source.

Edited by darth_ash, 06 July 2005 - 08:35 AM.

  • 0

#3
jcallis

jcallis

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
That would likely do it. Let me know when you can.

Thanks
  • 0

#4
darth_ash

darth_ash

    Member 1K

  • Member
  • PipPipPipPip
  • 1,382 posts
1) Open regedit.

Note: For the other steps, I have used the some variables, they are defined below:
xxxx: Type of log; i.e. either Application, Security or System
yyyy: The name of the source that generated the event as seen seen in "Event Viewer". e.g.: Userenv, MsiInstaller,


2) Go to "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\xxxx"
Double-click on the Sources value, to open the edit dialog. Remove the Source name from the list (i.e. yyyy).

3) Again in,"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\xxxx" Delete the yyyy key(sub-folder).


P.S: If u find it difficult to understand i will give u an example.
  • 0

#5
jcallis

jcallis

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Done. Now to see how it goes. Thanks.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP