How to recover accidently cleared system event viewer logs

Adnan 6 Reputation points
2022-09-14T11:20:52.277+00:00

Hello Support
I have accidentally cleared the system event viewer logs of my Windows 10 PC.
I want to recover the logs asap.
Please help me

Windows for business | Windows Client for IT Pros | User experience | Other
{count} votes

3 answers

Sort by: Most helpful
  1. Anonymous
    2022-09-14T12:57:13.04+00:00

    Unless you happen to have a backup they're gone.

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Anonymous
    2022-09-14T13:40:25.707+00:00

    Ok, well afraid it isn't possible. The system event log is mostly informational. The logs tend to repeat during reboots so maybe you can just delay the report.

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  3. Limitless Technology 39,926 Reputation points
    2022-09-15T08:00:59.09+00:00

    Hello there,

    If you ever saved the event logs, you can find the logs in the system path (C:\Windows\System32\winevt\Logs)

    Secondly, if there’s a system backup, you could try to restore from a previous system state to recover the logs.

    Windows stores event logs in the C:\WINDOWS\system32\config\ folder. If an application such as Microsoft Word crashes, then the Windows event log will create a log entry about the issue, the application name, and why it crashed.

    They are gone unless you either:

    -Saved the logs as it suggested you do when you clicked clear
    -Have a full system backup

    It's also possible but unlikely data recovery software could undelete them.

    -----------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer–


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.