Recover Cleared Windows Event Viewer System Log

Tüm Yanıtlar

• 

  

  1

  Oylamak İçin Oturum Aç

  Check from C:\Windows\System32\winevt\Logs\System.evtx

  Else check .log, log1, log2 from 

  C:\Windows\System32\config
  

  • Düzenleyen Partha1012 26 Haziran 2018 Salı 11:55
  • Yanıt Olarak Öneren Michael HxyMicrosoft contingent staff, Moderator 8 Temmuz 2018 Pazar 14:54
  • Yanıt Olarak İşaretleyen Hamid Sadeghpour SalehMVP, Moderator 2 Aralık 2019 Pazartesi 20:07

  26 Haziran 2018 Salı 11:54

  Yanıt

  |

  Alıntı
• 

  

  0

  Oylamak İçin Oturum Aç

  Unless you happen to have a backup they're gone.

   

   

  ---

  
  Regards, Dave Patrick ....
  Microsoft Certified Professional
  Microsoft MVP [Windows Server] Datacenter Management
  
  Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.
  

  • Yanıt Olarak Öneren Dave PatrickMVP 8 Temmuz 2018 Pazar 15:03

  26 Haziran 2018 Salı 13:14

  Yanıt

  |

  Alıntı
• 

  

  0

  Oylamak İçin Oturum Aç

  Hi,

  Thanks for your question.

  If you ever saved the event  logs, you can find the logs in the system path (C:\Windows\System32\winevt\Logs\)

  Secondly, if there’s a system backup, you could try to restore from a previous system state to recover the logs.

  Hope this helps. If you have any question and concern, please feel free to let me know.

  Best regards,

  Michael

  ---

  Please remember to mark the replies as an answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

  • Yanıt Olarak Öneren Michael HxyMicrosoft contingent staff, Moderator 8 Temmuz 2018 Pazar 14:54

  27 Haziran 2018 Çarşamba 06:38

  Yanıt

  |

  Alıntı

  Moderatör
• 

  

  0

  Oylamak İçin Oturum Aç

  Hi,

  Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.

  Best Regards,

  Michael

  ---

  Please remember to mark the replies as an answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

  29 Haziran 2018 Cuma 09:12

  Yanıt

  |

  Alıntı

  Moderatör
• 

  

  0

  Oylamak İçin Oturum Aç

  Hi,

  Just want to confirm the current situations.

  Please feel free to let us know if you need further assistance.

  Best regards,

  Michael

  ---

  Please remember to mark the replies as an answers if they help.
  If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

  
  

  • Düzenleyen Michael HxyMicrosoft contingent staff, Moderator 2 Temmuz 2018 Pazartesi 14:24

  2 Temmuz 2018 Pazartesi 14:24

  Yanıt

  |

  Alıntı

  Moderatör
• 

  

  0

  Oylamak İçin Oturum Aç

  Ctrl + Z literally worked for me in this same instance, just now...

  As long as you haven't taken many actions in Windows since then...

  • Yanıt Olarak Öneren MorganThePerson 15 Ağustos 2019 Perşembe 15:08

  15 Ağustos 2019 Perşembe 15:07

  Yanıt

  |

  Alıntı