Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a legacy application running on a Windows Server 2008 VM from Azure that is spamming our windows event log every minute or so. I do not have access to the source for the bit of code that is writing to the event log, only the dll file. I cannot rewrite it either as it's a massive piece of software, as much as I'd like to.

So my question is... Is there anyway for me to block the event source for certain messages? Obviously, I don't want to block the whole event source from logging as it does log helpful stuff when it goes wrong, it's just this one particular message is clogging up our server log and getting quite annoying!

share|improve this question

1 Answer 1

up vote 4 down vote accepted

You can't stop logging for a specific event ID with the means of Windows, however you can change event viewer filter settings so that some items are not displayed if you want to, i.e. to create Custom View.

enter image description here

share|improve this answer
    
This is great, thanks! I've actually created a custom view for just the service that spams excluding 'Information' logs which will be fine for now. The Application Log still will be spammed though. –  simonlchilds Nov 16 '12 at 12:15
    
Yes, it will be, but you won't see it in your Custom View. –  Volodymyr Nov 16 '12 at 12:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.