Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Let's say I want to remove a single event from the view so I can view the rest. How do I accomplish this? This is on a Server 2003 R2 box.

share|improve this question
up vote 3 down vote accepted

EDIT: To answer your edited question, the easiest way I can think of is to sort your Event Log by Event ID, select everything except the events you want to exclude and then Save Selected Events to file. It will save as a single Event Log file, which you can then open with your Event Viewer, and won't have the events you didn't select.

Powershell's another option, especially if you want to do that for a large number of Event Logs, but I don't have an "exclude Event ID" PS script handy, so I'm not going to punch it up unless you ask nicely.

And the now not-quite relevant original answer is below.

Yes, it's pretty easy, but a little different depending on what version of Windows you're using.

Images below.

In 2008 or Windows 7:

enter image description here

In 2003 or XP:

enter image description here

You can even use PowerShell to parse your EventLogs for you based on any number of factors... but the built in filters are pretty good.

share|improve this answer
I should have phrased my question better... how do I view everything EXCEPT for a specific Event ID? – Bigbio2002 Jul 26 '12 at 19:10
I see. Well, Powershell script's one way, but depending on your scripting skills, you might find it easier to sort your log by Event ID, select everything EXCEPT the EventID you want to exclude and then save the selected events off to a file somewhere. It'll create an event log file, which you can then open with the Event Viewer. – HopelessN00b Jul 26 '12 at 19:21
It clearly said in the screenshot: "To exclude criteria, type a minus sign first." – Michael Hampton Jul 26 '12 at 19:22
@Michael see my comments on joeqwerty's post... – Bigbio2002 Jul 26 '12 at 19:23
@HopelessN00b, thanks anyways, but it looks like my event log was flooded with so many of these messages that it overwrote everything up til yesterday evening. That's a good workaround for the future though. – Bigbio2002 Jul 26 '12 at 19:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.