Saturday, May 19, 2007

Batch file for clearing all the logs at once in Vista.

Vista has quite a large number of log files. Sometimes its nice for troubleshooting to wipe out all the logs and create a problem to see that problems manifestations in the logs. The following in a batch file will do this.

wevtutil cl "Application"
wevtutil cl "DFS Replication"
wevtutil cl "HardwareEvents"
wevtutil cl "Internet Explorer"
wevtutil cl "Key Management Service"
wevtutil cl "Security"
wevtutil cl "System"
wevtutil cl "EndpointMapper"
wevtutil cl "ForwardedEvents"
wevtutil cl "Microsoft-Windows-ADSI/Debug"
wevtutil cl "Microsoft-Windows-AltTab/Diagnostic"
wevtutil cl "Microsoft-Windows-Backup"
wevtutil cl "Microsoft-Windows-Bits-Client/Analytic"
wevtutil cl "Microsoft-Windows-Bits-Client/Operational"
wevtutil cl "Microsoft-Windows-CAPI2/Operational"
wevtutil cl "Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational"
wevtutil cl "Microsoft-Windows-CodeIntegrity/Operational"
wevtutil cl "Microsoft-Windows-CodeIntegrity/Verbose"
wevtutil cl "Microsoft-Windows-COM/Analytic"
wevtutil cl "Microsoft-Windows-CorruptedFileRecovery-Client/Operational"
wevtutil cl "Microsoft-Windows-CorruptedFileRecovery-Server/Operational"
wevtutil cl "Microsoft-Windows-CredUI/Diagnostic"
wevtutil cl "Microsoft-Windows-DateTimeControlPanel/Analytic"
wevtutil cl "Microsoft-Windows-DateTimeControlPanel/Debug"
wevtutil cl "Microsoft-Windows-DateTimeControlPanel/Operational"
wevtutil cl "Microsoft-Windows-DCLocator/Debug"
wevtutil cl "Microsoft-Windows-Diagnosis-DPS/Analytic"
wevtutil cl "Microsoft-Windows-Diagnosis-DPS/Debug"
wevtutil cl "Microsoft-Windows-Diagnosis-DPS/Operational"
wevtutil cl "Microsoft-Windows-Diagnosis-MSDT/Debug"
wevtutil cl "Microsoft-Windows-Diagnosis-MSDT/Operational"
wevtutil cl "Microsoft-Windows-Diagnosis-PLA/Debug"
wevtutil cl "Microsoft-Windows-Diagnosis-PLA/Operational"
wevtutil cl "Microsoft-Windows-Diagnosis-WDI/Debug"
wevtutil cl "Microsoft-Windows-Diagnostics-Networking/Debug"
wevtutil cl "Microsoft-Windows-Diagnostics-Networking/Operational"
wevtutil cl "Microsoft-Windows-Diagnostics-Performance/Diagnostic"
wevtutil cl "Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback"
wevtutil cl "Microsoft-Windows-Diagnostics-Performance/Operational"
wevtutil cl "Microsoft-Windows-DiskDiagnostic/Operational"
wevtutil cl "Microsoft-Windows-DiskDiagnosticDataCollector/Operational"
wevtutil cl "Microsoft-Windows-DiskDiagnosticResolver/Operational"
wevtutil cl "Microsoft-Windows-DriverFrameworks-UserMode/Operational"
wevtutil cl "Microsoft-Windows-DxgKrnl/Diagnostic"
wevtutil cl "Microsoft-Windows-EFS/Debug"
wevtutil cl "Microsoft-Windows-EventCollector/Debug"
wevtutil cl "Microsoft-Windows-EventCollector/Operational"
wevtutil cl "Microsoft-Windows-Eventlog-ForwardPlugin/Debug"
wevtutil cl "Microsoft-Windows-EventLog-WMIProvider/Debug"
wevtutil cl "Microsoft-Windows-EventLog/Analytic"
wevtutil cl "Microsoft-Windows-EventLog/Debug"
wevtutil cl "Microsoft-Windows-FileInfoMinifilter/Operational"
wevtutil cl "Microsoft-Windows-Firewall-CPL/Diagnostic"
wevtutil cl "Microsoft-Windows-Forwarding/Operational"
wevtutil cl "Microsoft-Windows-FunctionDiscoveryHost/Tracing"
wevtutil cl "Microsoft-Windows-GroupPolicy/Operational"
wevtutil cl "Microsoft-Windows-Help/Operational"
wevtutil cl "Microsoft-Windows-HotStart/Diagnostic"
wevtutil cl "Microsoft-Windows-HttpService/Trace"
wevtutil cl "Microsoft-Windows-International/Operational"
wevtutil cl "Microsoft-Windows-IPSEC-SRV/Diagnostic"
wevtutil cl "Microsoft-Windows-Kernel-Acpi/Diagnostic"
wevtutil cl "Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic"
wevtutil cl "Microsoft-Windows-Kernel-PnP/Diagnostic"
wevtutil cl "Microsoft-Windows-Kernel-Power/Diagnostic"
wevtutil cl "Microsoft-Windows-Kernel-Prefetch/Diagnostic"
wevtutil cl "Microsoft-Windows-Kernel-Process/Analytic"
wevtutil cl "Microsoft-Windows-Kernel-Registry/Analytic"
wevtutil cl "Microsoft-Windows-Kernel-WDI/Analytic"
wevtutil cl "Microsoft-Windows-Kernel-WDI/Debug"
wevtutil cl "Microsoft-Windows-Kernel-WDI/Operational"
wevtutil cl "Microsoft-Windows-Kernel-WHEA"
wevtutil cl "Microsoft-Windows-LanguagePackSetup/Analytic"
wevtutil cl "Microsoft-Windows-LanguagePackSetup/Debug"
wevtutil cl "Microsoft-Windows-LanguagePackSetup/Operational"
wevtutil cl "Microsoft-Windows-LDAP-Client/Debug"
wevtutil cl "Microsoft-Windows-MeetingSpace/Operational"
wevtutil cl "Microsoft-Windows-MemoryDiagnostics-Results/Debug"
wevtutil cl "Microsoft-Windows-mobsync/Diagnostic"
wevtutil cl "Microsoft-Windows-MPS-CLNT/Diagnostic"
wevtutil cl "Microsoft-Windows-MPS-DRV/Diagnostic"
wevtutil cl "Microsoft-Windows-MPS-SRV/Diagnostic"
wevtutil cl "Microsoft-Windows-MUI/Operational"
wevtutil cl "Microsoft-Windows-NetworkAccessProtection/Operational"
wevtutil cl "Microsoft-Windows-OfflineFiles/Analytic"
wevtutil cl "Microsoft-Windows-OfflineFiles/Debug"
wevtutil cl "Microsoft-Windows-OfflineFiles/Operational"
wevtutil cl "Microsoft-Windows-OfflineFiles/SyncLog"
wevtutil cl "Microsoft-Windows-PowerCfg/Diagnostic"
wevtutil cl "Microsoft-Windows-PowerCpl/Diagnostic"
wevtutil cl "Microsoft-Windows-PrintSpooler/Aux-Analytic"
wevtutil cl "Microsoft-Windows-PrintSpooler/Core-Analytic"
wevtutil cl "Microsoft-Windows-PrintSpooler/Core-Debug"
wevtutil cl "Microsoft-Windows-PrintSpooler/ISV-Analytic"
wevtutil cl "Microsoft-Windows-Program-Compatibility-Assistant/Operational"
wevtutil cl "Microsoft-Windows-QoS-Pacer/Debug"
wevtutil cl "Microsoft-Windows-QoS-qWAVE/Debug"
wevtutil cl "Microsoft-Windows-ReadyBoost/Operational"
wevtutil cl "Microsoft-Windows-ReliabilityAnalysisComponent/Operational"
wevtutil cl "Microsoft-Windows-RemoteAssistance/Admin"
wevtutil cl "Microsoft-Windows-RemoteAssistance/Operational"
wevtutil cl "Microsoft-Windows-RemoteAssistance/Tracing"
wevtutil cl "Microsoft-Windows-Resource-Exhaustion-Detector/Operational"
wevtutil cl "Microsoft-Windows-Resource-Exhaustion-Resolver/Operational"
wevtutil cl "Microsoft-Windows-Resource-Leak-Diagnostic/Operational"
wevtutil cl "Microsoft-Windows-ResourcePublication/Tracing"
wevtutil cl "Microsoft-Windows-RestartManager/Operational"
wevtutil cl "Microsoft-Windows-RPC/Debug"
wevtutil cl "Microsoft-Windows-RPC/EEInfo"
wevtutil cl "Microsoft-Windows-Security-Licensing-SLC/Perf"
wevtutil cl "Microsoft-Windows-Sens/Debug"
wevtutil cl "Microsoft-Windows-ServiceReportingApi/Debug"
wevtutil cl "Microsoft-Windows-Services-Svchost/Diagnostic"
wevtutil cl "Microsoft-Windows-Services/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-AuthUI-Common/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-AuthUI-PasswordProvider/BootAnim"
wevtutil cl "Microsoft-Windows-Shell-AuthUI-PasswordProvider/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-DefaultPrograms/Diagnostic"
wevtutil cl "Microsoft-Windows-Shell-Shwebsvc"
wevtutil cl "Microsoft-Windows-Shell-ZipFolder/Diagnostic"
wevtutil cl "Microsoft-Windows-Speech-UserExperience/Diagnostic"
wevtutil cl "Microsoft-Windows-stobject/Diagnostic"
wevtutil cl "Microsoft-Windows-Subsys-Csr/Operational"
wevtutil cl "Microsoft-Windows-Subsys-SMSS/Operational"
wevtutil cl "Microsoft-Windows-SystemHealthAgent/Diagnostic"
wevtutil cl "Microsoft-Windows-TaskScheduler/Debug"
wevtutil cl "Microsoft-Windows-TaskScheduler/Diagnostic"
wevtutil cl "Microsoft-Windows-TaskScheduler/Operational"
wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Admin"
wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Analytic"
wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Debug"
wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Operational"
wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic"
wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug"
wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational"
wevtutil cl "Microsoft-Windows-UAC-FileVirtualization/Operational"
wevtutil cl "Microsoft-Windows-UAC/Operational"
wevtutil cl "Microsoft-Windows-User-Loader/Analytic"
wevtutil cl "Microsoft-Windows-VolumeSnapshot-Driver/Operational"
wevtutil cl "Microsoft-Windows-WindowsUpdateClient/Operational"
wevtutil cl "Microsoft-Windows-WinINet/Analytic"
wevtutil cl "Microsoft-Windows-Wininit/Diagnostic"
wevtutil cl "Microsoft-Windows-Winlogon/Diagnostic"
wevtutil cl "Microsoft-Windows-Winlogon/Operational"
wevtutil cl "Microsoft-Windows-WinRM/Analytic"
wevtutil cl "Microsoft-Windows-WinRM/Debug"
wevtutil cl "Microsoft-Windows-Winsock-AFD/Operational"
wevtutil cl "Microsoft-Windows-Winsock-WS2HELP/Operational"
wevtutil cl "Microsoft-Windows-Winsrv/Analytic"
wevtutil cl "Microsoft-Windows-Wired-AutoConfig/Operational"
wevtutil cl "Microsoft-Windows-WLAN-AutoConfig/Operational"
wevtutil cl "Microsoft-Windows-WMI-Activity/Trace"
wevtutil cl "Microsoft-Windows-WSC-SRV/Diagnostic"
wevtutil cl "Microsoft-Windows-WUSA/Debug"
wevtutil cl "Setup"

1 comment:

Unknown said...

Excellent batch! Thanks!