Navigation section
wevtutil
About this tag
The wevtutil command-line tool is used for managing Windows event logs, including tasks like clearing, exporting, and configuring logs. In WindowsForum.com discussions, users report that running wevtutil.exe to wipe event logs can cause existing custom views in Event Viewer to become read-only, preventing edits to properties such as filtering warnings. Another known issue is that wevtutil.exe cannot overwrite an exported event log file in Windows 7 and later versions. These threads highlight practical troubleshooting scenarios where wevtutil affects Event Viewer functionality, particularly around custom view editability and log export limitations.
-
P
Windows 7 Event Viewer existing custom view = read-only??
When I start MS build-in Event Viewer, then go to Custom Views--->Adminstrative Events and right click and select "Properties" then all the parameters are disabled resp. read-only. See attached snapshot Why? As far as I remember they were editable in the past. I could (de-)select e.g...- pstein
- Thread
- administrative events configuration custom view editable event viewer logs microsoft properties read only system administration system events tech support troubleshooting user interface wevtutil windows settings windows tools
- Replies: 1
- Forum: Windows Help and Support
-
You cannot overwrite an exported event log file by using the Wevtutil.exe tool in Windows 7, Windows
Link Removed- News
- Thread
- command line error handling event log export file management logs troubleshooting wevtutil windows 7 windows tools
- Replies: 0
- Forum: Knowledge Base (KB)