Home/ Questions/Q 6132827
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T17:09:04+00:00

I have registered the log and added the source through the registry. ( HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<Log>\<Source>

  • 0

I have registered the log and added the source through the registry.
(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<Log>\<Source>)

When registering, the system creates evt file for the events and set up the whole log parameters.

However I don’t know how could I unregister specific source or the whole Log.
I can of course delete the keys in the registry and it will dissappear from the system event viewer however the file *.evt is still blocked by the svchost and I would like to also delete this file.

How would I completely stop such a log?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    From MSDN:
    DeregisterEventSource Closes a write handle to the specified event log.
    ClearEventLog Clears the specified event log, and optionally saves the current copy of the log to a backup file.

    See this MSDN Article for more details

    • 0