Windows 10: Can individual events in Event Viewer be deleted/recovered?

Discus and support Can individual events in Event Viewer be deleted/recovered? in Windows 10 Support to solve the problem; I learnt how to check Event Viewer logs to detect my kids using the computer outside of their alloted times. Now I'm thinking: what if they're... Discussion in 'Windows 10 Support' started by antonio3535, Oct 10, 2018.

  1. Can individual events in Event Viewer be deleted/recovered?


    I learnt how to check Event Viewer logs to detect my kids using the computer outside of their alloted times.

    Now I'm thinking: what if they're deleting individual events? (I know they're not deleting whole logs as that's easy to detect), they know how to google for these easy hacks, that's my concern.

    How can I know if they've deleted an event? Could I recover it?

    The events I'm interested in are these:
    4624 sign in LogonType 7
    4625 unsuccessful sign in
    4634 sign out LogonType 2
    4800 locked
    4801 unlocked
    SYSTEM:
    6005 started
    6006 shut down
    6008 dirty/improper shutdown (seems to be the next start after a dirty shutdown and maybe preceeded by a gap of time, to be confirmed) shows message when the dirty took place.

    Any help much appreciated *092

    :)
     
    antonio3535, Oct 10, 2018
    #1

  2. Any experience with alternatives to the Event Viewer?


    I'd like to be able to:


    1. Search for every instance of an event
    2. Delete individual events

    I've read about these apps:



    Please give your experiences with these apps or similar ones and list any things that you'd like Event Viewer to do.
     
    Advice Pro, Oct 10, 2018
    #2
  3. event viewer

    You don't need to delete anything in the Event Viewer, please ignore any responses suggesting you should. They are automatically managed by Windows and do not take up any space.
     
    Andre Da Costa, Oct 10, 2018
    #3
  4. spike47 Win User

    Can individual events in Event Viewer be deleted/recovered?

    Error in event viewer

    Hi

    I keep geting the following in the Event viewer ,
    The description for Event ID (4) in source ( SuperProServer ) cannot be found . the local computer may not have the necessary registry information or message DLL files to display message from a remote computer . You may be able to use /AUXSOURCE= flag to retrieve this description . The following information is part of the event, The event log file is corrupt .

    has anyone any ideas has to what this means .

    cheers
     
    spike47, Oct 10, 2018
    #4
Thema:

Can individual events in Event Viewer be deleted/recovered?

Loading...
  1. Can individual events in Event Viewer be deleted/recovered? - Similar Threads - individual events Event

  2. event viewer

    in Windows 10 Gaming
    event viewer: Log Name: System Source: storahci Date: 14. 11. 2023 19:34:18 Event ID: 129 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: DESKTOP-K4FLHO8 Description: Reset to device, \Device\RaidPort0, was issued. Event Xml:...
  3. event viewer

    in Windows 10 Gaming
    event viewer: **************THE HELL DOES THIS MEAN? THXLog Name: Microsoft-Windows-Kernel-PnP/Configuration Source: Microsoft-Windows-Kernel-PnP Date: 11/26/2021 11:22:13 PM Event ID: 400 Task Category: None Level: Information Keywords: User: SYSTEM Computer: Ashhhhh Description: Device...
  4. event viewer

    in Windows 10 Software and Apps
    event viewer: **************THE HELL DOES THIS MEAN? THXLog Name: Microsoft-Windows-Kernel-PnP/Configuration Source: Microsoft-Windows-Kernel-PnP Date: 11/26/2021 11:22:13 PM Event ID: 400 Task Category: None Level: Information Keywords: User: SYSTEM Computer: Ashhhhh Description: Device...
  5. how to recover events deleted from event viewer

    in Windows 10 Customization
    how to recover events deleted from event viewer: Hi all, I mistakenly deleted events from event viewer "Clear log..." utility I have not a backup second mistake do you know if they are permanently deleted or is there a chance to recover them? a kind of bin? thanks Ale...
  6. event viewer

    in Windows 10 BSOD Crashes and Debugging
    event viewer: code defenitions https://answers.microsoft.com/en-us/windows/forum/all/event-viewer/32a8bf89-f0e7-42b2-91f6-a2a60da0a8e1
  7. Can event viewer events be easily deleted (by teens)?

    in User Accounts and Family Safety
    Can event viewer events be easily deleted (by teens)?: I'm using Event Viewer in Windows 10 to control my kids screen time. One of my kids (14yo) is a bit too tech savvy so I wonder if he may have googled for a way to delete entries (such as 4634 sign out LogonType 2 just to give an example). I guess this needs too much knowledge...
  8. Event Viewer

    in Windows 10 Customization
    Event Viewer: Hi. I'm trying to tackle and understand the mysterious EV. IDs are nonexistent or vague. The wording sometimes make sense sometimes, I don't have access to the PC with the error logs. I'm trying to understand without the access. Hope this makes sense. Questions?...
  9. event viewer

    in Windows 10 Performance & Maintenance
    event viewer: I see many errors in event viewer but do not know what they mean. I was going to show one but thought it may compromise my security. Sorry about the post lacking information; are these errors dangerous for the most part or are they harmless. I am not going to poke around here...
  10. Event Viewer

    in Windows 10 Performance & Maintenance
    Event Viewer: Is there any way to clear the items listed in 'administrative events' in event viewer? TIA, Richard 98433