How to view and delete Event Viewer Saved Logs in Windows 7 | 8

Event Viewer (eventvwr.msc) is an advanced tool in Windows  that displays detailed information about significant events on your Windows computer, which can be helpful when troubleshooting problems and errors with Windows and other programs.

Event Viewer Saved Logs

If you are a regular of Event Viewer and you frequently view many .evt or .evtx files in Event Viewer, you may have noticed that a large number of files end up accumulating under Saved Logs. These entries remain even if you delete the original .evt and .evtx files.

These Saved Logs are stored .xml format, in the ExternalLogs folder. which is hidden. To view this folder, first through the folder options, uncheck the hidden and system files options, and navigate to the following path:

C:\ProgramData\Microsoft\Event Viewer\ExternalLogs

You will see the .xml logs here. The contents of this folder are hidden so you must turn on Show Hidden Files and turn off Hide Protected Operating System Files to see them.

To open a saved event log, start Event Viewer. Now, in the Actions menu, click Open Saved Log and navigate to and selecte the Saved Log from its location.

event manager saved logs 600x393 How to view and delete Event Viewer Saved Logs in Windows 7 | 8

You can delete the Saved Logs from the Actions Box. But when you delete the log from the Event Manager’s Actions Box, you are only removing it from the console tree; you are not deleting the log file from the system.

If you wish you can delete the logs from your system, you will have to navigate to the mentioned ExternalLogs folder and delete them manually. Make sure that the Event Viewer is closed when you delete these files.

Windows Event Viewer Plus, a portable freeware app that lets you view Event Logs faster than the default in-built Windows Event Viewer, may also interest you.

Posted by on , in Category Windows with Tags
Anand Khanse aka HappyAndyK is an end-user Windows enthusiast, a Microsoft MVP in Windows, since 2006, and the Admin of Please create a System Restore Point before trying out any software & be careful about any third-party offers while installing freeware. Add me on Google+.
  • Random Guy

    You can also purge them from the command line. From an elevated command:
    del /s /q %programdata%\microsoft\eventv~1\extern~1

  • Johnny

    “THANKS” I downloaded it and unzipped it and it works fine!!!!!!!!! Microsoft should have made somthing like this to clean up the Event Viewer in Win 7.

  • Machiel_v_zanten

    Can someone delete only certain entries someway or another from the logs on your system (wondows7)?

    I’m asking this because I need to trust my event logs. If someone can delete entries this event-logging will become meaningless I think.

  • Myemail

    The folder at ‘C:ProgramDataMicrosoftEvent ViewerExternalLogs’ does not exist on my Windows 7 computer. I have unchecked the hidden and system files options.

    I did find .evtx log file data at ‘C:WindowsSystem32winevtLogs’

  • Srini

    Wmic neteventlog can be used to delete the files. source:

  • anand r k

    the event viewer can also be opened in the start menu ,”IN THE SEARCH PROGRAMS AND FILES”on windows 7



  • Recent Comments