Disable Logging of Certain Events

Masuch, Michael 36 Reputation points
2021-12-06T12:40:07.417+00:00

Dear all,

we have set up an DHCPv6 server but only want to give IPv6 addresses to predefined clients. So we use the reservation function to assign IPv6 addresses.
To stop the Windows DHCPv6 service from giving everyone IPv6 addresses we blocked the whole range. But this leads to thousands of event entries, telling us, the there are no IPv6 addresses available anymore. Is there a way to disable this event or at least to remove these from the log?

155283-screenshot-2021-12-06-133721.png

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,113 questions
Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
1,021 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,351 Reputation points
    2021-12-08T17:04:23.21+00:00

    Hello @Masuch, Michael

    I am not sure if you can stop logging for a specific event ID, however you can change event viewer filter settings so that some items are not displayed if you want to, i.e. to create Custom View. Try also to use Server Manager, or Perfomance MSC.

    Under (Performance)->Data Collector Sets->Event Trace Sessions, select EventLog-Application and press [ENTER].

    Under Trace Providers tab (default), look at the Properties list. Here you will find a Level property, which enables you to define (filter) the level of logging as you would expect.

    Or double click on the error/warning in event viewer and click on the details tab and write down the GUID {} Open up regedit and go to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System \ {GUID}] on the right where the registry entries are, look for "Enabled" which will be set to one, change that to 0. reboot two times for the entry to take effect. this has worked for me for three errors/warnings that can be ignored.

    Hope this helps with your query!

    -------------

    --If the reply is helpful, please Upvote and Accept as answer--

    1 person found this answer helpful.
    0 comments
  2. Masuch, Michael 36 Reputation points
    2021-12-16T10:20:48.21+00:00

    Dear @Limitless Technology ,

    thank you for your answer!

    My main problem is, that these events take up all the storage that I allocated for DHCP events.

    If I set the "Enabled" word under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System{6d64f02c-a125-4dac-9a01-f0555b41ca84}" to 0, then I would not receive any events. But I need to analyze these from time to time.

    Maybe someone knows a way to configure the DHCP server in that way, that no "free" IPv6 addresses

    0 comments