Is there a simple way to configure which events get logged in the
various event logs, or at least stop the logging of events that are
currently being logged, such as events that are simply "information",
like "the xxx service started successfully", etc?

Is there a management snap-in under "manage PC" that I'm missing?

Why can't I right-click on an event and be able to alter it's logging
status?

"XP Guy" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
> Is there a simple way to configure which events get logged in the
> various event logs, or at least stop the logging of events that are
> currently being logged, such as events that are simply "information",
> like "the xxx service started successfully", etc?
>
> Is there a management snap-in under "manage PC" that I'm missing?
>
> Why can't I right-click on an event and be able to alter it's logging
> status?


I don't know if this will help you out, but here's what I do on a new
computer so I got a version of Event Viewer that already filters out the
Information events.

Go to Start -> Run and enter mmc.exe. Click OK.
In the new Console, click on the File menu at the top of the screen and
select Add/Remove Snap-in.
In Add/Remove Snap-in, click on the Add button on the Standalone page.
Scroll down the list of Snap-ins and select Event Viewer.
Hit the Add button.
In the Select Computer dialog, leave it set to local computer and hit the
Finish button.
Close the Add Standalone Snap-in box.
Back at Add/Remove Snap-in, hit the OK button.
In the Console Root, hit the Maximize button (just to the right of the red
X) to expand the console.
In the left hand pane, click on the + sign next to Event Viewer (Local).
Right click on the first entry under Event Viewer and select Properties from
the menu. For the sake of this example let's assume that the first entry is
the default one, Application.
On the Application Properties sheet, click on the Filter tab.
On the Filter page, uncheck Information and click OK.
Note: You can make other changes as well if you want.
Do the above procedure for each entry under Event Viewer.
Once you've configured the last item on the list, click on the File menu at
the top of the Window.
Select Save As from the menu.
Where you save this new console and what you name it is up to you. I save
mine in the C:\Windows\System32 folder and name it Filtered_Events.msc.

Next, go to the C:\Windows\System32 folder and locate the console you just
created.
Right click on it and select Send To -> Desktop (create shortcut).
Where you place this new shortcut is up to you. You could simply place it on
your Start menu or in the Quick Launch area. What I do is go to Control
Panel, open the Administrative Tools folder and drag the shortcut to my
Filtered Events console from the Desktop into the folder. It now's
accessible in a number of ways, through the Control Panel, through the Start
menu since I've configured it to show Administrative tools, and also through
the Run box (Windows key +R).

Good luck

Nepatsfan

What long winded set of steps, whoo.

All you are doing is enabling a filter, you are not "configuring which events get logged".


"Nepatsfan" <(E-Mail Removed)> wrote in message news:#(E-Mail Removed)...
> "XP Guy" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
>> Is there a simple way to configure which events get logged in the
>> various event logs, or at least stop the logging of events that are
>> currently being logged, such as events that are simply "information",
>> like "the xxx service started successfully", etc?
>>
>> Is there a management snap-in under "manage PC" that I'm missing?
>>
>> Why can't I right-click on an event and be able to alter it's logging
>> status?
>
>
> I don't know if this will help you out, but here's what I do on a new
> computer so I got a version of Event Viewer that already filters out the
> Information events.
>
> Go to Start -> Run and enter mmc.exe. Click OK.
> In the new Console, click on the File menu at the top of the screen and
> select Add/Remove Snap-in.
> In Add/Remove Snap-in, click on the Add button on the Standalone page.
> Scroll down the list of Snap-ins and select Event Viewer.
> Hit the Add button.
> In the Select Computer dialog, leave it set to local computer and hit the
> Finish button.
> Close the Add Standalone Snap-in box.
> Back at Add/Remove Snap-in, hit the OK button.
> In the Console Root, hit the Maximize button (just to the right of the red
> X) to expand the console.
> In the left hand pane, click on the + sign next to Event Viewer (Local).
> Right click on the first entry under Event Viewer and select Properties from
> the menu. For the sake of this example let's assume that the first entry is
> the default one, Application.
> On the Application Properties sheet, click on the Filter tab.
> On the Filter page, uncheck Information and click OK.
> Note: You can make other changes as well if you want.
> Do the above procedure for each entry under Event Viewer.
> Once you've configured the last item on the list, click on the File menu at
> the top of the Window.
> Select Save As from the menu.
> Where you save this new console and what you name it is up to you. I save
> mine in the C:\Windows\System32 folder and name it Filtered_Events.msc.
>
> Next, go to the C:\Windows\System32 folder and locate the console you just
> created.
> Right click on it and select Send To -> Desktop (create shortcut).
> Where you place this new shortcut is up to you. You could simply place it on
> your Start menu or in the Quick Launch area. What I do is go to Control
> Panel, open the Administrative Tools folder and drag the shortcut to my
> Filtered Events console from the Desktop into the folder. It now's
> accessible in a number of ways, through the Control Panel, through the Start
> menu since I've configured it to show Administrative tools, and also through
> the Run box (Windows key +R).
>
> Good luck
>
> Nepatsfan
>
>
>

"ju.c" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> What long winded set of steps, whoo.
>
> All you are doing is enabling a filter, you are not "configuring which
> events get logged".

The OP posted his question on the 20th. I waited 24 hours to see if someone
could provide a solution that would accomplish the goal of, as you put it,
"configuring which events get logged". Since nobody did, I decided it
wouldn't hurt to pass along an option to the OP.

You're right, my answer doesn't prevent any events from being logged. I
never said it did. What it does is provide a modified instance of Event
Viewer where the entries of the type that the OP mentioned, "the xxx service
started successfully", will automatically be filtered out. The events listed
will be the important ones, Errors and Warnings.

BTW, unless the OP multi-posted this question to another newsgroup, I don't
see where your response helped him at all.

And as far as my response being "long winded", if you don't want to read my
answers please feel free to add me to your killfile. I'm guessing you know
how that's done but just in case, post back and I'll be glad to provide a
step-by-step long winded outline of the procedure.

Have a nice FN day

Nepatsfan

> "Nepatsfan" <(E-Mail Removed)> wrote in message
> news:#(E-Mail Removed)...
>> "XP Guy" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
>>> Is there a simple way to configure which events get logged in the
>>> various event logs, or at least stop the logging of events that are
>>> currently being logged, such as events that are simply "information",
>>> like "the xxx service started successfully", etc?
>>>
>>> Is there a management snap-in under "manage PC" that I'm missing?
>>>
>>> Why can't I right-click on an event and be able to alter it's logging
>>> status?
>>
>>
>> I don't know if this will help you out, but here's what I do on a new
>> computer so I got a version of Event Viewer that already filters out the
>> Information events.
>>
>> Go to Start -> Run and enter mmc.exe. Click OK.
>> In the new Console, click on the File menu at the top of the screen and
>> select Add/Remove Snap-in.
>> In Add/Remove Snap-in, click on the Add button on the Standalone page.
>> Scroll down the list of Snap-ins and select Event Viewer.
>> Hit the Add button.
>> In the Select Computer dialog, leave it set to local computer and hit the
>> Finish button.
>> Close the Add Standalone Snap-in box.
>> Back at Add/Remove Snap-in, hit the OK button.
>> In the Console Root, hit the Maximize button (just to the right of the
>> red X) to expand the console.
>> In the left hand pane, click on the + sign next to Event Viewer (Local).
>> Right click on the first entry under Event Viewer and select Properties
>> from the menu. For the sake of this example let's assume that the first
>> entry is the default one, Application.
>> On the Application Properties sheet, click on the Filter tab.
>> On the Filter page, uncheck Information and click OK.
>> Note: You can make other changes as well if you want.
>> Do the above procedure for each entry under Event Viewer.
>> Once you've configured the last item on the list, click on the File menu
>> at the top of the Window.
>> Select Save As from the menu.
>> Where you save this new console and what you name it is up to you. I save
>> mine in the C:\Windows\System32 folder and name it Filtered_Events.msc.
>>
>> Next, go to the C:\Windows\System32 folder and locate the console you
>> just created.
>> Right click on it and select Send To -> Desktop (create shortcut).
>> Where you place this new shortcut is up to you. You could simply place it
>> on your Start menu or in the Quick Launch area. What I do is go to
>> Control Panel, open the Administrative Tools folder and drag the shortcut
>> to my Filtered Events console from the Desktop into the folder. It now's
>> accessible in a number of ways, through the Control Panel, through the
>> Start menu since I've configured it to show Administrative tools, and
>> also through the Run box (Windows key +R).
>>
>> Good luck
>>
>> Nepatsfan
>>
>>