Batch File For Saving And Clearing Event Viewer Logs?
Sep 21, 2010
I have looked all over the internet and these forums for an answer before I posted this. I can find little pieces of help here and there but not fully what I need. I need help writing code in a batch file that will allow me to automatically save the event viewer logs to a certain location with a certain file name and then clear the log out of event viewer.
1. I have 6 logs, Application/Security/System/DNS Server/Microsoft Office Diagnostics/Microsoft Office Sessions
2. I would like these logs to be saved with the building name that the servers are located in, also including the date that it was cleared and which log it was
3. Example of saved log name: "Bldg 248 16Nov12 Application" (date can also be in 20121116 format)
I have looked all over the internet and these forums for an answer before I posted this. I can find little pieces ofre and there but not fully what I need. batch file that will allow me to automatically save the event viewer logs to a certain location with a certain file name and then clear the log out of event viewer.1. I have 6 logs, Application/Security/System/DNS erver/Microsoft Office Diagnostics/Microsoft Office Sessions2. I would like these logs to be saved with the building name that the servers are located in, also including the date that it was cleared and which log it was3. Example of saved log name: "Bldg 248 16Nov12 Application" (date can also be in 20121116 format) 4. Logs need to save to My Documents Folder
Basically my laptop has been having very high temperatures for a long time (usually ~60C for CPU and often 100-110 for GPU...insanely high, in other words) For example, see how hot the machine gets just by resuming from a sleep (this is all within a minute or so):I have been seeing the following error in event viewer each time I start Windows (4 entries) for some time:So today I bit the bullet and had the back cover off the laptop and noticed what a bad state the thermal compound was in, for both the CPU and the chipset chip, so wiped it off using TIM Cleaner, and then applied new thermal compound and put the laptop back together. I was actually shocked because for the first time since I can remember, I could feel cold air blowing from the vents of my laptop! I logged into Windows and noticed that my temperatures had fallen and were staying at around the below:Not as low as I'd like but a massive improvement. Trouble is, I am still getting the WHEA-Logger event errors in Windows Event Viewer ('processor core') and wondered if this was not in regards to overheating after all?The plus side is my laptop is now almost totally silent - the way it must have been when I bought it new 3 years ago! But I was wondering how to investigate these WHEA-Logger errors?PS - I think I accidentally got some TIM Cleaner spilt on the carpet. Might be nothing to worry about, but I did notice the "Harmful" hazard symbol on the bottle?
Can anyone help with the following errors in event viewer
Event ID 1001 DHCPv6-Client
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x001C25E65B39. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
Errors appear every 3 mins or so can you help fix please? has been happening sinc install.
Event ID 7000 Service Control Manager
The BANTExt service failed to start due to the following error:
The system cannot find the file specified.
Began this morning
Event ID 16385 Security-SPP
Failed to schedule SPPSVC for re-start at 2009-06-17T23:59:11Z. Error Code: 0x80070490.
Began 2 days ago
Event ID 2 Kernel-EventTracing
Session "Circular Kernel Context Logger" has failed to start with the following error(s) 0xC0000035
This has begun to appear this morning and every 2 or 3 mins
Clean install from Microsoft image and valid key from Microsoft.
I looked at my specific manufacturers toolbox to see details about the drive and I noticed that it has already accumulated over 5 billion writes so far. This thing is a little over a week old. So then I'm looking at my event logs and I'm thinking that every single one of these entries is a small write here and there and EVERYWHERE and it just never stops!! Then I tried to move the logs to my D: drive by modifying the settings within Group Policy Editor (gpedit.msc) and the major ones did move there, but then there are over a hundred different other log categories under windows and there were no group policy settings for those. I was inspired to start this thread by another thread regarding clearing all those log files with a simple bat file. That conversation is here http://forums.cnet.com/7723-19411_102-378338/delete-all-event-logs-at-once-in-windows-7/ They came up with a .bat file that does clean them all out with one swoop. I am not good with those things and I was hoping that modifying something small would enable those certain files ending in .evtx to be moved to a new location and registered within Windows. Otherwise it's a huge amount of time going through each one to change the location from within the Event Viewer.
I was told that I need to have my event log cleaned up (those that show crtiical error more than anything else) so that it would not fill up and cause a computer crash? I have never heard this before for a home computer.
I was told that I need to have my event log cleaned up (those that show crtiical error more than anything else) so that it would not fill up and cause a computer crash? I have never heard this before for a home computer.
I have a PC I assembled last June. After I loaded it up with my applications and connected my devices I began getting device disconnect sounds as well as a few device connect sounds. I've been troubleshooting by disconnecting all devices then adding devices back one at a time to try to find the culprit. I'm not getting consistent or convincing results so far, but will keep working on that approach.
A Web search on the subject returns lots of results where users are experiencing these sounds. Answers are sparse. And antagonizing! I have not found any hints as to how to extract from the system what is actually happening. What I am looking for is if anybody knows where in the system I can find a log that records device connect/disconnect events associated with these sounds.
CASE Cooler Master HAF 912 RC-912-KKN1 Mid Tower MOTHERBOARD ASUS P8P67 Deluxe LGA (P67 B3 Rev) CPU Intel BX80623I72600K Core i7-2600K Sandy Bridge 3.4GHz (3.8GHz Turbo Boost)
I left my PC in the company of someone who might have done some meddling. It is configured to require the password upon re-opening it, but it is my understanding this can be by-passed. And, if true, knowing the time this would have occurred, can I use the Event Viewer to determine what actions might have been performed? Or is there a simpler method?
it says that in order to clear events, go to the Action menu and click 'Clear'. I have already saved everything in an external file but in the Action menu there is no option to clear.
Using Event Viewer/Applications I was getting 5 error events each day. This had to do with a "search" for a file on an external HD. I have just formated the HD and now I get "Warnings" about the the same files. The HD is now blank.
i've just installed a fresh OS, Windows 7 Ultimate 64-bit and i have a error message when i reboot or turn off my PC. The error appears then disappears so quick i can't read it. Then in Event Viewer i have couple of Error ID 10, and i think that's the error message i get on rebooting/shut down, my PC.
Is there a way to delete some or all the entries in Event Viewer / Custom Views / Administrative Events?This things logs a bunch of stuff for Acobat and Spybot and for my 3ware SATA controller card. I do not need all this garbage piling up and was just wondering if there is a way to clean it out once in awhile.I looked and can not see away to do it.
I vaguely understand what the Event Viewer is but I do not have the slightest clue as to what the "events" mean. First I open event viewer then I click Administrative Events and it says that 199 events were found. Most of them are warnings but quite a few are errors. The warning that constantly showing up the most is Gigabit Network Connection Network link is disconnected. Another Warning that has popped up 4 times in a row was Request to physical disk 0 has timed out. The most recent error said that the application specific permission settings do not grant Local Launch permission for the COM server application with the CLSID. What does this all mean and should I be worrying?! I am so unbelievably concerned and confused as this has been my first computer build and I know little on the subject
I haven't used Event Viewer before and I'm not sure how to interpret events. All I want is to establish whether a PC was a) on and b) in use between 00:00 and 03:30 on a particular day. What is the easiest way to go about that?
I am trying to create a batch file that runs 3 other batch files. Right now, it works fine using the call command on each other batch file. However, these other batch files take awhile to run. and so the entire process takes a very long time, since each "sub" batch file is run only after the previous one is finished.I was wondering if there is a command or way to start a batch file fro the top-level batch file, then go on and start the next batch file before the previous one is finished. In other words, I want the sub batch files to run in parallel in the background. (similar to the '&' in Unix).
i am getting atapi errors in event viewer, the other day my monitor would not come out of power save mode. i have tester bother my hard drives and they pass. i have also checked my cables and they are fitted ok. i have never had this before and do not know what to do.
I am having this problem for about a week, however I, nor others could solve this so far. My knowledge is too limited so here it goes:
Event Viewer Critical ID 41 Source Kernel-Power Task Category (63)
Infrequent occurance, usually once or twice a day - now it just occured twice in about 3 hours. Doesn't matter if i am running any applications or if i am just idling at the desktop.
While in the event viewer I thought I was deleting some entries in the summary View and ended up deleting the view. I think that I can re-create the veiew if someone can go in and select the properties of that view, then select Edit Filter, then select the XML tab and copy the entire query and then post in in a response to this post.
I have a FUJITSU LIFEBOOK LH531 (Intel Core i7-2640M CPU @2.80GHz, 8 GB RAM running Windows 7 Home Premium SP1 x64).Since 2 days the notebook has become too slow. The boot process is now taking 2-3 times longer. After boot, opening any program takes ages. Even when I click on START, the menu takes time to appear. I did not instal any new hardware or software when the problem started. Also I did varous virus/malware checks, nothing detected.But when I looked at the event log of my notebook - there were so many errors & warnings (see JPG attachment) - and this is affecting the performance.
A text version of the event log is below.
Level Date and Time Source Event ID Task Category log.jpg 194K 3 downloads Warning 07/03/2012 10:28:42 Microsoft-Windows-Diagnostics-Performance 101 Boot Performance Monitoring "This application took longer than usual to start up, resulting in a performance degradation in the system startup process: File Name : Skype.exe Friendly Name : Skype Version : 5.8.0.158
Whenever I launch Event Viewer, I get this message. Ditto when I try launching Computer Management. I sometimes get a message about Adding a snap-in to console. But it never works. I ran SFC SCANNOW and it fix some stuff requiring a restart and is running clean now. No improvement.I tried going back to an image from several weeks ago. Event Viewer worked but when I ran SFC SCANNOW and restarted, it stopped working again.If I run mmc.exe, I get a single folder Console Root. Trying to launch Event Viewer from the File menu crashes it. Running services the same way works. Running Component Management crashes.
After updating my drivers today I am now getting the following Warning in Event Viewer: 'An error was detected on device DeviceHarddisk0DR0 during a paging operation.' I formatted my hd and did a clean install on Sunday and the warning wasn't there then or soon after. It didn't start to appear until I updated my drivers. I booted up at 5:28 and there are around10 of these warnings at boot up. If so what driver will I need to roll-back? I have an HP p6520y computer.
Every 7 minutes this error is logged in event viewer.
I have wired connection disabled, wireless connection works fine. It actually works much better than it did with XP Pro. Lan transfers are much faster.
I have replicated a strange occurrence involving event viewer data over and over in case I was going insane and I would like to share this story in case someone can explain this spooky occurrence! A while ago I had to use system image restore (windows 7 image restore) to restore my entire system from a backup on my external. Everything went perfect, but one day whilst exploring Event Viewer I noticed some recorded events logged that occurred AFTER my image backup and before the restore. (the very events that clued me into running my image restore in the first place). Intrigued, I low level formatted my C: drive and again reinstalled from my image back up and again all recent events up to the most recent were still there in Event Viewer. How is this possible? Do I need an Exorcism performed on my PC? I have since replicated this multiple times out of share fascination. Any thoughts or priests that I could call on?
