How to disable rasman logs (event id 20209) on windows server 2012 r2

Question

Hello,

I have disabled all rras logs. 1- From rras console to Do not log any event, 2- From netsh ras set tracing * disabled.

but rasman warning log event id 20209 is still log in event viewer.

I have also tried to remove the event log registry of rasman but still it giving me log with source IP having on it.

Please guide me how disable it.

Thank you.

Regards,

Faraz Ahmed Khan

Answer 1

Hello there,

I am not sure if you can stop logging for a specific event ID, however you can change event viewer filter settings so that some items are not displayed if you want to, i.e. to create Custom View. Try also to use Server Manager, or Perfomance MSC.

Under (Performance)->Data Collector Sets->Event Trace Sessions, select EventLog-Application and press [ENTER].

Under Trace Providers tab (default), look at the Properties list. Here you will find a Level property, which enables you to define (filter) the level of logging as you would expect.

Or double click on the error/warning in event viewer and click on the details tab and write down the GUID {} Open up regedit and go to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System \ {GUID}] on the right where the registry entries are, look for "Enabled" which will be set to one, change that to 0. reboot two times for the entry to take effect. this has worked for me for three errors/warnings that can be ignored.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--