Deleting Custom Event Log Source Without Using Code

c# windows event-log
Wolfwyrd picture Wolfwyrd · Sep 24, 2008 · Viewed 43.4k times · Source

I have an application that has created a number of custom event log sources to help filter its output. How can I delete the custom sources from the machine WITHOUT writing any code as running a quick program using System.Diagnostics.EventLog.Delete is not possible.

I've tried using RegEdit to remove the custom sources from [HKEY_LOCAL_MACHINE\SYSTEM\ControlSetXXX\Services\Eventlog] however the application acts as if the logs still exist behind the scenes.

What else am I missing?

Answer

Mike L picture Mike L · Sep 24, 2008

I also think you're in the right place... it's stored in the registry, under the name of the event log. I have a custom event log, under which are multiple event sources.

HKLM\System\CurrentControlSet\Services\Eventlog\LOGNAME\LOGSOURCE1 HKLM\System\CurrentControlSet\Services\Eventlog\LOGNAME\LOGSOURCE2

Those sources have an EventMessageFile key, which is REG_EXPAND_SZ and points to:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll

I think if you delete the Key that is the log source, LOGSOURCE1 in my example, that should be all that's needed.

For what it's worth, I tried it through .NET and that's what it did. However, it does look like each custom event log also has a source of the same name. If you have a custom log, that could affect your ability to clear it. You'd have to delete the log outright, perhaps. Further, if your app has an installer, I can see that the application name also may be registered as a source in the application event log. One more place to clear.

Related questions

Write to Windows Application Event Log

Is there a way to write to this event log: Or at least, some other Windows default log, where I don't have to register an event source?

Read More
System.Security.SecurityException: The source was not found, but some or all event logs could not be searched. Inaccessible logs: Security

I am trying to create a Windows Service, but when I try and install it, it rolls back giving me this error: System.Security.SecurityException: The source was not found, but some or all event logs could not be searched. …

Read More
What event id to use for my custom event log entries?

Is there any ranges of valid event IDs which should be used by custom applications while logging to Windows EventLog? Or I can use any event ID of my choice (1,2,3,4....). P.S, I am developing in C#.NET.

Read More