Recover Cleared Windows Event Viewer System Log

Todas las respuestas

• 

  

  1

  Inicie sesión para votar

  Check from C:\Windows\System32\winevt\Logs\System.evtx

  Else check .log, log1, log2 from 

  C:\Windows\System32\config
  

  • Editado Partha1012 martes, 26 de junio de 2018 11:55
  • Propuesto como respuesta Michael HxyMicrosoft contingent staff, Moderator domingo, 8 de julio de 2018 14:54
  • Marcado como respuesta Hamid Sadeghpour SalehModerator lunes, 2 de diciembre de 2019 20:07

  martes, 26 de junio de 2018 11:54

  Responder

  |

  Citar
• 

  

  0

  Inicie sesión para votar

  Unless you happen to have a backup they're gone.

   

   

  ---

  
  Regards, Dave Patrick ....
  Microsoft Certified Professional
  Microsoft MVP [Windows Server] Datacenter Management
  
  Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.
  

  • Propuesto como respuesta Dave PatrickMVP domingo, 8 de julio de 2018 15:03

  martes, 26 de junio de 2018 13:14

  Responder

  |

  Citar
• 

  

  0

  Inicie sesión para votar

  Hi,

  Thanks for your question.

  If you ever saved the event  logs, you can find the logs in the system path (C:\Windows\System32\winevt\Logs\)

  Secondly, if there’s a system backup, you could try to restore from a previous system state to recover the logs.

  Hope this helps. If you have any question and concern, please feel free to let me know.

  Best regards,

  Michael

  ---

  Please remember to mark the replies as an answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

  • Propuesto como respuesta Michael HxyMicrosoft contingent staff, Moderator domingo, 8 de julio de 2018 14:54

  miércoles, 27 de junio de 2018 6:38

  Responder

  |

  Citar

  Moderador
• 

  

  0

  Inicie sesión para votar

  Hi,

  Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.

  Best Regards,

  Michael

  ---

  Please remember to mark the replies as an answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

  viernes, 29 de junio de 2018 9:12

  Responder

  |

  Citar

  Moderador
• 

  

  0

  Inicie sesión para votar

  Hi,

  Just want to confirm the current situations.

  Please feel free to let us know if you need further assistance.

  Best regards,

  Michael

  ---

  Please remember to mark the replies as an answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

  
  

  • Editado Michael HxyMicrosoft contingent staff, Moderator lunes, 2 de julio de 2018 14:24

  lunes, 2 de julio de 2018 14:24

  Responder

  |

  Citar

  Moderador
• 

  

  0

  Inicie sesión para votar

  Ctrl + Z literally worked for me in this same instance, just now...

  As long as you haven't taken many actions in Windows since then...

  • Propuesto como respuesta MorganThePerson jueves, 15 de agosto de 2019 15:08

  jueves, 15 de agosto de 2019 15:07

  Responder

  |

  Citar