{"id":1814,"date":"2016-03-04T14:13:09","date_gmt":"2016-03-04T08:43:09","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=1814"},"modified":"2019-05-12T02:55:44","modified_gmt":"2019-05-12T02:55:44","slug":"custom-view-system-restore-event-log-viewer","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/custom-view-system-restore-event-log-viewer\/","title":{"rendered":"How to Create a Custom View for System Restore Events in Event Viewer?"},"content":{"rendered":"<p>System Restore errors and informational events are logged in the Application event log. With hundreds of other entries added to the Application log every day, inspecting the System Restore events is time-consuming. Every time the user needs to use &quot;Filter the current log&quot; option to display only the System Restore entries, and then clear the filter once the entries are checked. Easier option would be to create a Custom View that lists only the System Restore entries, and this post tells you how.<!--more--><\/p>\n<p>Start Event Viewer, and click Create Custom View&#8230; in the Actions pane.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/w10-custom-view-1.png\" width=\"359\" height=\"255\"><\/p>\n<p>Configure the Custom View dialog as in the image below, and click OK.<\/p>\n<ul>\n<li><b>Event level:<\/b> All event levels checked. To only view entries that need your action, uncheck &quot;Information&quot; and enable all others.<\/li>\n<li><b>By log:<\/b> Application<\/li>\n<li><b>By Source:<\/b> System Restore. For a thorough analysis, you may want to include <b>VSS<\/b> entries as well.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/w10-custom-view-2.png\" width=\"543\" height=\"551\"><\/p>\n<p>This creates a custom System Restore view listed under Custom Views category.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/w10-custom-view-3.png\" width=\"600\" height=\"504\"><\/p>\n<p>Under Applications and Service Logs &gt; Microsoft &gt; Windows, separate logs are maintained by each application\/service; but there isn&#8217;t a separate log for System Restore&#8230; which is where the Custom View option comes in handy.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>System Restore errors and informational events are logged in the Application event log. With hundreds of other entries added to the Application log every day, inspecting the System Restore events is time-consuming. Every time the user needs to use &quot;Filter the current log&quot; option to display only the System Restore entries, and then clear the &#8230; <a title=\"How to Create a Custom View for System Restore Events in Event Viewer?\" class=\"read-more\" href=\"https:\/\/www.winhelponline.com\/blog\/custom-view-system-restore-event-log-viewer\/\" aria-label=\"Read more about How to Create a Custom View for System Restore Events in Event Viewer?\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[7],"tags":[],"class_list":["post-1814","post","type-post","status-publish","format-standard","hentry","category-windows"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":19493,"url":"https:\/\/www.winhelponline.com\/blog\/jump-directly-to-specific-event-log-eventvwr\/","url_meta":{"origin":1814,"position":0},"title":"How to Jump to a Specific Event Log (Channel) Directly in Event Viewer","author":"Ramesh","date":"October 24, 2020","format":false,"excerpt":"The event logging service in Windows records important software and hardware events from various sources and stores them in a collection named event log. There are various event log channels in addition to the well-known built-in channels like Application, System, Security, etc.\u00a0The Event Viewer (eventvwr.msc or eventvwr.exe) enables you to\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"eventvwr command-line parameters list","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/eventvwr-commandline.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/eventvwr-commandline.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/eventvwr-commandline.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":75211,"url":"https:\/\/www.winhelponline.com\/blog\/how-to-read-chkdsk-log-event-viewer\/","url_meta":{"origin":1814,"position":1},"title":"How to Read Chkdsk Log in the Event Viewer","author":"Ramesh","date":"May 16, 2024","format":false,"excerpt":"The Chkdsk utility checks the file system and file system metadata of a volume for logical and physical errors and repairs them. When you run Chkdsk c: \/r and schedule it for the next boot, Chkdsk runs the scan during the next boot. The results of the Chkdsk operation is\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"windows event log - filter current log","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/05\/chkdsk-event-log-wininit-chkdsk.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/05\/chkdsk-event-log-wininit-chkdsk.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/05\/chkdsk-event-log-wininit-chkdsk.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/05\/chkdsk-event-log-wininit-chkdsk.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":76299,"url":"https:\/\/www.winhelponline.com\/blog\/backup-error-0x81000019-0x8007085a\/","url_meta":{"origin":1814,"position":2},"title":"Fix: Windows Backup Errors 0x81000019 and 0x8007085a","author":"Ramesh","date":"August 10, 2024","format":false,"excerpt":"When you use the legacy backup tool, Backup and Restore (Windows 7), in Windows 10 or 11, the error code 0x81000019 may appear. Windows Backup did not complete successfully. If you click \"Options\" the following error message is shown: A shadow copy could not be created. Please check \"VSS\" and\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"windows backup error","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/08\/windows-backup-error.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/08\/windows-backup-error.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/08\/windows-backup-error.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":5464,"url":"https:\/\/www.winhelponline.com\/blog\/system-restore-error-0x80042308-reset-vss\/","url_meta":{"origin":1814,"position":3},"title":"System Restore Error 0x80042308 &#8220;Object could not be found&#8221;","author":"Ramesh","date":"October 11, 2017","format":false,"excerpt":"When you attempt to create a new Restore Point, the error 0x80042308 may pop up and the restore point isn't created: The restore point could not be created for the following reason: The specified object could not be found. (0x80042308) Please try again. Also, the same error code appears when\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"System Restore Error 0x80042308 \u201cObject could not be found\u201d","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/system-restore-80042308-1.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":10260,"url":"https:\/\/www.winhelponline.com\/blog\/vss-event-log-errors-windows-10-event-ids-8193-and-13\/","url_meta":{"origin":1814,"position":4},"title":"VSS Event Log Errors: Event IDs 8193 and 13","author":"Ramesh","date":"July 9, 2019","format":false,"excerpt":"After upgrading to Windows 10 v1903, two VSS error entries appear in the Application event log during every shutdown. The Event IDs are 8193 and 13 with the event source as VSS. Along with the two error logs, an informational event (ID: 8224) is also recorded during the user session\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"event viewer error - event id 8193","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/vss-error-8193-event-log.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/vss-error-8193-event-log.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/vss-error-8193-event-log.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":31266,"url":"https:\/\/www.winhelponline.com\/blog\/0x81000203-vss-system-restore-error\/","url_meta":{"origin":1814,"position":5},"title":"[Fix] System Restore Encountered an Error 0x81000203","author":"Ramesh","date":"December 25, 2022","format":false,"excerpt":"When you open the System Properties dialog (sysdm.cpl) and click System Protection, the error 0x81000203 occurs. Here's the full error message verbatim: There was an unexpected error in the property page: System Restore encountered an error. Please try to run System Restore again. (0x81000203) Please close the property page and\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"8004230f windows upgrade - vss error","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/home-to-pro-upgrade-activation-error-1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/home-to-pro-upgrade-activation-error-1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/home-to-pro-upgrade-activation-error-1.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/1814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=1814"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/1814\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=1814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=1814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=1814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}