Windows 10: How do I reset custom view ''administrative events' in Event Viewer

how do I reset the custom view ''administrative events'', which is the first class of event that windows create ?

i do not want to erase the other logs, only this one

:)

 

Win 10 Event Viewer -- cannot save filter in Custom Views

I try to keep up a custom view for the Event Viewer. Since Win 10 was upgraded I can add exclusions such as ...-1234,-567,-89... but these are not saved upon exit from Event Viewer. Many repeated events are reported and most are not important.

Nor can I find where the filter data is stored: registry, sys32, etc.

Steps: Launch Event Viewer -- find one or more events in the custom view log -- launch Filter Current Custom View -- Add the events to be filtered out (including a (-)minus sign and comma separation. (note that in the current session, the events are
removed as is expected) -- close the Filter Current Custom View (note that there is no Apply button) -- close and restart Event Viewer.

Results: added event filter numbers are removed from the filter list -- any filter brought over from Win 8 upgrade still remain.

Fixing this would be great. Knowing where the data is stored would also be fine.

 

How do I open Event Viewer with Window Event Viewer: Custom Views> Adminstrative Events?

Hi

,

I open Windows Event Viewer often (most days) to take a look for entries in the Windows 10 created Filter

Custom Views> ServerRoles> Administrative Events. (especially as my Win 10Pro (x64) is newly installed)What I wish to seek advice on is, how can I adjust my Desktop shortcut
%windir%\system32\eventvwr.msc /s so that when I click on it Window Event Viewer will always open with
Custom Views> ServerRoles> Administrative Events expanded (which I believe is a Windows filter). I did manage to work out how to open with "Windows Logs> Applications" but I am not able to use the same method with
Administrative Events.

My clean install of Win 10 Pro (x64) Windows Event Viewer always opens with Event Viewer (Local) and I have to drill down the tree each time to view "Administrative Events"

I have searched the Web (without success) and also viewed eventvwr /? via cmd.exe but it is beyond my understanding in relation to what I wish to achieve.

I am hoping somebody can kindly advise me on what I need in my shortcut.

Many thanks

 

Event Viewer Starts in Custom Views


After a clean install mine starts at the top in Event Viewer Local.

I tend to use event viewer - custom views - administrative events because thats there most of the pertinent information is. But if I close it it goes back to the top level.