Windows 10: Event viewer : error when creating custom view

Hi,


I can't create a custom view.


When I click on "Custom View" under "Event Viewer (Local)" I get an error "MMC has detected an error in a snap-in and will unload it"





The detailed error appears after :






Content is :


FX:{b05566ad-fe9c-4363-be05-7a4cbb7cb510}

The process cannot access the file 'C:\ProgramData\Microsoft\Event Viewer\Views\View_0.xml' because it is being used by another process.


at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.get_IsReadOnlyView()
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.UpdateReadOnly()
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.InitializeQueryNode(FileInfo fileInfo)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.AddSubNodes(DirectoryInfo dir, EventNodeType nodeType, Boolean userQuery, String standardViewConfig)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.AddSavedQueryNodes()
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.CreateChildNodes()
at Microsoft.EventViewer.SnapIn.MMCEventsNode.ExpandNode()
at Microsoft.EventViewer.SnapIn.MMCEventsNode.OnExpand(AsyncStatus status)
at Microsoft.ManagementConsole.NodeSyncManager.ProcessRequest(NodeRequestInfo info, IRequestStatus requestStatus)
at Microsoft.ManagementConsole.SnapIn.ProcessRequest(Request request)
at Microsoft.ManagementConsole.Internal.SnapInClient.Microsoft.ManagementConsole.Internal.IMessageClient.ProcessRequest(Request request)
at Microsoft.ManagementConsole.Internal.IMessageClient.ProcessRequest(Request request)
at Microsoft.ManagementConsole.Executive.RequestStatus.BeginRequest(IMessageClient messageClient, RequestInfo requestInfo)
at Microsoft.ManagementConsole.Executive.SnapInRequestOperation.ProcessRequest()
at Microsoft.ManagementConsole.Executive.Operation.OnThreadTransfer(SimpleOperationCallback callback)



If I delete the file "C:\ProgramData\Microsoft\Event Viewer\Views\View_0.xml" and open Event Viewer, then I can open Custom Views





But as soon as I save a new created custom view I get the same error.


Any idea ?

:)

 

Event viewer on laptop-unable to create a custom view


Am trying to create a custom view within Windows 10 x64 1809 on my laptop.
Regretfully I can't select a log file - or whatever - all is greyed out.
This versus event viewer Windows 10 x64 1803 on PC.

Does anyone have a suggestion?

Thanks!

 

Win 10 Event Viewer -- cannot save filter in Custom Views

I try to keep up a custom view for the Event Viewer. Since Win 10 was upgraded I can add exclusions such as ...-1234,-567,-89... but these are not saved upon exit from Event Viewer. Many repeated events are reported and most are not important.

Nor can I find where the filter data is stored: registry, sys32, etc.

Steps: Launch Event Viewer -- find one or more events in the custom view log -- launch Filter Current Custom View -- Add the events to be filtered out (including a (-)minus sign and comma separation. (note that in the current session, the events are
removed as is expected) -- close the Filter Current Custom View (note that there is no Apply button) -- close and restart Event Viewer.

Results: added event filter numbers are removed from the filter list -- any filter brought over from Win 8 upgrade still remain.

Fixing this would be great. Knowing where the data is stored would also be fine.

 

Windows Event Viewer Errors


Hi win10fuser,

Unfortunately with the given information nobody can provide a suggestion close to a possible solution.

We'll need details about the error events, export the custom event view, save it and upload the saved XML file in a zip file.
On the right side of event viewer click 'Export Custom View'
Attachment 87903