Clearing a Windows event log


To perform this task, the PATROL console account must have administrative privileges. If the PATROL console account lacks these privileges, you must supply the name and password for an account that has administrative privileges.

To clear a Windows event log

  1. From the KM Commands for an NT_EVLOGFILES application instance, choose Clear.
    A confirmation message box opens.
  2. In the confirmation message box, select one of the following options:
    1. If you want to continue and clear the selected event log, click Yes.
      • If the PATROL console account has administrative privileges, the event log is cleared.
      • If the PATROL console account did not have administrative privileges, a dialog box opens that requests you to enter the user name and password for an account that has the administrative privileges required.
    2. If you do not want to continue, click No.
  3. If the console account information dialog box is displayed, enter the name and password for an account that has the appropriate privileges and click OK.
    1. If the account entered has the appropriate privileges, a confirmation message opens verifying that the selected event log has been cleared.
    2. If the account entered does not have the appropriate privileges, a message opens that states that the account does not have the appropriate privileges.

Related topics

Enable and disable monitoring of Windows events

Backing up or saving a Windows event log

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*