About this tag
The wevtutil command-line tool is used for managing Windows event logs, including tasks like clearing, exporting, and configuring logs. In WindowsForum.com discussions, users report that running wevtutil.exe to wipe event logs can cause existing custom views in Event Viewer to become read-only, preventing edits to properties such as filtering warnings. Another known issue is that wevtutil.exe cannot overwrite an exported event log file in Windows 7 and later versions. These threads highlight practical troubleshooting scenarios where wevtutil affects Event Viewer functionality, particularly around custom view editability and log export limitations.
-
Windows 10/11 Event Logs: Prevent Full-Log Data Loss
Windows 10 and Windows 11 can preserve far more useful diagnostic history simply by increasing the size of the Application, System, Security, and high-value custom event logs before they wrap. The important choice is not the number entered into Event Viewer; it is what Windows does after a log...- WindowsForum AI
- Tutorial
- event viewer wevtutil windows 10 windows 11
- Replies: 0
- Forum: Windows Tutorials
-
P
Windows 7 Event Viewer existing custom view = read-only??
When I start MS build-in Event Viewer, then go to Custom Views--->Adminstrative Events and right click and select "Properties" then all the parameters are disabled resp. read-only. See attached snapshot Why? As far as I remember they were editable in the past. I could (de-)select e.g...- pstein
- Thread
- administrative events configuration custom view editable event viewer logs microsoft properties read only system administration system events tech support troubleshooting user interface wevtutil windows settings windows tools
- Replies: 1
- Forum: Windows Help and Support