Filter out Event Viewer Logs

Question

Is there a way delete older entries in Windows Event Viewer Logs specifically Forwaded Events? I have tried Powershell Limit-log but it does nothing.

Answer 1

Hello

Thank you for posting in Microsoft Community forum.

Unfortunately, I couldn't find any specific documents or emails directly addressing this issue. However, I can provide some general guidance that might help.

To delete older entries in the Windows Event Viewer Logs, you can try the following steps:

Manually Clear the Log:

• Open Event Viewer.
• Navigate to the Forwarded Events log.
• Right-click on the log and select "Clear Log...".

Using PowerShell:

• You can use the Clear-EventLog cmdlet to clear the log. For example: Clear-EventLog -LogName "ForwardedEvents"
• If you want to clear entries older than a certain date, you might need to filter and remove them manually. Unfortunately, PowerShell does not provide a direct way to delete specific entries based on date.

Using Task Scheduler:

• You can create a scheduled task to clear the log periodically.
• Open Task Scheduler and create a new task.
• In the "Actions" tab, add a new action to run PowerShell with the command: Clear-EventLog -LogName "ForwardedEvents"

If these methods do not work, you might need to look into third-party tools or scripts that can help manage and clear event logs based on specific criteria.

Best Regards,

Wesley Li