If you’re receiving the following error when trying to clear an event log file using the
wevtutil.exe CLI tool, then you’re most likely using an incorrect log file name parameter:
Failed to clear log <logfile>. The specified channel could not be found. Check channel configuration.
For example, the event log file name and the display name for “Internet Explorer” are the same, hence the following command would clear the Internet Explorer log:
wevtutil cl "Internet Explorer"
Whereas for some other events such as “Microsoft Office Alerts”, the log file name is different from the display name. To know the file name, right-click on a log and choose Properties.
Note down the Full Name / Log Path.
To clear the Microsoft Office Alerts, you’ll now use this command-line:
wevtutil cl OAlerts
To enumerate and list all the log files, use:
wevtutil el | more
One small request: If you liked this post, please share this?One "tiny" share from you would seriously help a lot with the growth of this blog. Some great suggestions:
- Pin it!
- Share it to your favorite blog + Facebook, Reddit
- Tweet it!