How to Clear Saved Records in the Event Viewer

Introduction

If you frequently work with multiple .evtx files in the Event Viewer, you’ve likely noticed how the “Saved Files” list can quickly become cluttered with dozens of entries. This can make it harder to navigate and manage your saved logs.

In this guide, we’ll show you how to quickly clear the “Saved Files” list in the Event Viewer by creating and running a simple cleanup script.


Why Clear the Saved Files List?

Clearing the “Saved Files” list in the Event Viewer is useful for:

  • Improved Organization: Keeping the Event Viewer clean and manageable.
  • Reduced Clutter: Avoid confusion caused by old or irrelevant saved records.
  • Enhanced Workflow: Focus on current logs without distractions from outdated entries.

Steps to Clear Saved Records in Event Viewer

Follow these simple steps to clean up the “Saved Files” list:

1. Create a Cleanup File

To automate the process, create a cleanup script:

  • Open a text editor (e.g., Notepad).
  • Paste the following command into the editor:
del /s /q %programdata%\microsoft\eventv~1\extern~1
  • Save the file and rename its extension from .txt to .cmd.

2. Run the Cleanup File

Once the cleanup file is created, follow these steps to execute it:

  • Ensure all Event Viewer windows are closed.
  • Right-click the .cmd file and select “Run as Administrator”.

Result

The next time you open the Event Viewer, the “Saved Files” list will be empty, leaving you with a clean slate to manage new logs.


Benefits of Using a Cleanup File

1. Automation

No need for manual deletion—save time by running the script whenever needed.

2. Simplicity

The cleanup file is lightweight and easy to create, requiring only basic text editing.

3. Efficiency

Quickly clear cluttered saved records without navigating through the Event Viewer interface.


Reference

For more information on Event Viewer and managing .evtx files, visit the official Microsoft documentation:
Event Viewer Overview | Microsoft Learn

Leave a Comment