Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a legacy application running on a Windows Server 2008 VM from Azure that is spamming our windows event log every minute or so. I do not have access to the source for the bit of code that is writing to the event log, only the dll file. I cannot rewrite it either as it's a massive piece of software, as much as I'd like to.

So my question is... Is there anyway for me to block the event source for certain messages? Obviously, I don't want to block the whole event source from logging as it does log helpful stuff when it goes wrong, it's just this one particular message is clogging up our server log and getting quite annoying!

share|improve this question
up vote 4 down vote accepted

You can't stop logging for a specific event ID with the means of Windows, however you can change event viewer filter settings so that some items are not displayed if you want to, i.e. to create Custom View.

enter image description here

share|improve this answer
This is great, thanks! I've actually created a custom view for just the service that spams excluding 'Information' logs which will be fine for now. The Application Log still will be spammed though. – simonlchilds Nov 16 '12 at 12:15
Yes, it will be, but you won't see it in your Custom View. – Volodymyr M. Nov 16 '12 at 12:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.