Event log summary instance cannot be removed

Each Windows event log application contains an instance named Summary that cannot be removed.

Explanation

Solution

Configuration variable setting needs to be changed.

To permanently remove Summary instances from the event log applications, set the value of the agent configuration variable OverrideSummaryAutoCreate to 1.

For more information, see OverrideSummaryAutoCreate. Alternatively, you can also permanently remove the Summary instance by following these steps:

Executing the KM menu command Configure Windows Event Monitoring.
From the Configure Windows Event Monitoring window, right-click the Summary instance and select Delete.

Page tree

Event log summary instance cannot be removed