XP Guy said:
Is there a simple way to configure which events get logged in the
various event logs, or at least stop the logging of events that are
currently being logged, such as events that are simply "information",
like "the xxx service started successfully", etc?
Is there a management snap-in under "manage PC" that I'm missing?
Why can't I right-click on an event and be able to alter it's logging
status?
I don't know if this will help you out, but here's what I do on a new
computer so I got a version of Event Viewer that already filters out the
Information events.
Go to Start -> Run and enter mmc.exe. Click OK.
In the new Console, click on the File menu at the top of the screen and
select Add/Remove Snap-in.
In Add/Remove Snap-in, click on the Add button on the Standalone page.
Scroll down the list of Snap-ins and select Event Viewer.
Hit the Add button.
In the Select Computer dialog, leave it set to local computer and hit the
Finish button.
Close the Add Standalone Snap-in box.
Back at Add/Remove Snap-in, hit the OK button.
In the Console Root, hit the Maximize button (just to the right of the red
X) to expand the console.
In the left hand pane, click on the + sign next to Event Viewer (Local).
Right click on the first entry under Event Viewer and select Properties from
the menu. For the sake of this example let's assume that the first entry is
the default one, Application.
On the Application Properties sheet, click on the Filter tab.
On the Filter page, uncheck Information and click OK.
Note: You can make other changes as well if you want.
Do the above procedure for each entry under Event Viewer.
Once you've configured the last item on the list, click on the File menu at
the top of the Window.
Select Save As from the menu.
Where you save this new console and what you name it is up to you. I save
mine in the C:\Windows\System32 folder and name it Filtered_Events.msc.
Next, go to the C:\Windows\System32 folder and locate the console you just
created.
Right click on it and select Send To -> Desktop (create shortcut).
Where you place this new shortcut is up to you. You could simply place it on
your Start menu or in the Quick Launch area. What I do is go to Control
Panel, open the Administrative Tools folder and drag the shortcut to my
Filtered Events console from the Desktop into the folder. It now's
accessible in a number of ways, through the Control Panel, through the Start
menu since I've configured it to show Administrative tools, and also through
the Run box (Windows key +R).
Good luck
Nepatsfan
