How do I stop Windows Event Viewer from recording "Information" type events on Windows Server 2016/19/22 servers ?

Question

Some servers with large volumes of users are generating significant disk churn with unwanted "Information" type of events taking up over 99% of the events recorded. I want to keep using the option to overwrite oldest events first, but the continuous cycle of deleting old and logging new events in large user number environments degrades system performance.

Answer 1

Hello

To stop Windows Event Viewer from recording "Information" type events on Windows Server 2016/19/22 servers, you can follow these steps:

Open Event Viewer: Press Win + R, type eventvwr.msc, and press Enter.

Navigate to the Event Log: In the left pane, expand Windows Logs and select the log you want to modify (e.g., Application, System).

Filter the Log: Right-click on the log and select Filter Current Log.

Exclude Information Events: In the Filter Current Log window, uncheck the "Information" checkbox under the "Event level" section.

Apply the Filter: Click OK to apply the filter.

This will prevent "Information" type events from being displayed in the Event Viewer, but they will still be recorded in the log file. To completely stop recording these events, you would need to modify the logging settings for each specific event source, which can be more complex and may require editing the registry or using Group Policy.

Answer 2

Hello

Do you have any other questions?

What is the current progress of the issue?

Thanks