ClearEventLog( )
Action: 	Clears up a Windows NT eventlog.
 
Syntax: 	CLEAREVENTLOG ("eventlog")
 
Parameter: 	Eventlog

    String indicating the eventlog to clear. By default, Windows NT supports three eventlogs:
 "Application", "Security" and "System". Optionally, the string can include the name of a remote system 
on which to clear the log.

Returns: 	
0 		Eventlog cleared
>0 		Errorcode
 
See Also: 	BackupEventLog( ), LogEvent( )
 
Examples: 	

$rc=ClearEventLog("Application")
$rc=ClearEventLog("\\PDC\Application")
$rc=ClearEventLog("System")

Quote:

---

is it possible to delete an event

---

Quote:

---

....
I can get only the EVT file. I guess i will have to convert it into excel or csv (every new file after 16000 rows) to solve this problem.
....

---

Quote:

---

Maybe you can convince the person exporting the event log to a file to export it to csv (tab or comma delimited). The event logs can easily be exported like this because it is a build in option when saving the event log to a file.

---

BREAK ON
DEBUG ON

$InputFile = "file1.txt"
$OutputFile = "file2.txt"
$counter = 0

$Handle1 = FreeFileHandle()
$Handle2 = FreeFileHandle()

If Open($Handle2, $OutputFile,5) = 0	
	? "Counter value: " + $counter
Else
	beep
Endif

If Open($Handle1, $InputFile,2) = 0
  $x = ReadLine($Handle1)
  While @ERROR = 0
    $counter = $counter + 1	
    ? "Line read: [" + $x + "]"
    $y = INSTR($x, "1102")
    If ($y!=0)
    	$z = WriteLine($Handle2,$x)
    EndIf
    $x = ReadLine($Handle1)
  Loop
  ? $counter
  ? @SERROR
  $rc=Close ($Handle1)
Else
  ? @SERROR
  Beep
EndIf

$rc=Close($Handle2)

If Not Split($x,",")[5] = "560"
;If Not Split($x,Chr(9))[5] = "560" ;if TAB delimited
	;Write stuff $x to file2.txt
EndIf

$Handle1 = FreeFileHandle()
$Handle2 = FreeFileHandle()

If NOT @LOGONMODE
	Break ON
EndIf
Dim $SO
$SO = SetOption("Explicit","On")
$SO = SetOption("NoMacrosInStrings","On")
$SO = SetOption("NoVarsInStrings","On")
$SO = SetOption("WrapAtEOL","On")

Dim $InputFile, $OutputFile, $Handle1, $Handle2, $Line
$InputFile = "file1.txt"
$OutputFile = "file2.txt"

;Open first file for read, if fails, end code
$Handle1 = FreeFileHandle()
If Open($Handle1,$InputFile,2) = 0
	;Open second file for write, if fails, close first file, end code
	$Handle2 = FreeFileHandle()
	If Open($Handle2,$OutputFile,5) = 0
		;Read line after line until error code indicates there are no lines anymore
		$Line = ReadLine($Handle1)
		While @ERROR = 0
			;If NOT event 560 occurred, write line to second file
			If NOT Split($Line,",")[5] = "560"
				$SO = WriteLine($Handle2,$Line + Chr(13) + Chr(10))
			EndIf
		$Line = ReadLine($Handle1)
		Loop
		;Close files
		$SO = Close($Handle1)
		$SO = Close($Handle2)
	Else
		$SO = Close($Handle1)
	EndIf
EndIf

Quote:

---

Is the file comma delilited or tab delimited?
I thought you were looking for event 560?
I think the EventID is on the sixth position.
I think splitting the lines would give a more certain result.

---

The file is tab delimited
I m actually looking for each ID individually. When the file size is reduced, it becomes easier to log.
Splitting the lines also didnt help.
actually the script is not able to read the input file; may be it because of UNICODE issue. (I used event viewer to generate a sample text file)

Dim $InputFile, $OutputFile, $Handle1, $Handle2, $Line
$InputFile = "file1.txt"
$OutputFile = "file2.txt"

shell "%comspec% /c type theFile.txt > theFileInANSI.txt"

If NOT @LOGONMODE
	Break ON
EndIf
Dim $SO
$SO = SetOption("Explicit","On")
$SO = SetOption("NoMacrosInStrings","On")
$SO = SetOption("NoVarsInStrings","On")
$SO = SetOption("WrapAtEOL","On")

Dim $InputFile, $OutputFile, $Handle1, $Handle2, $Line
$InputFile = "file1.txt"
$OutputFile = "file2.txt"

;Open first file for read, if fails, end code
$Handle1 = FreeFileHandle()
If Open($Handle1,$InputFile,2) = 0
	;Open second file for write, if fails, close first file, end code
	$Handle2 = FreeFileHandle()
	If Open($Handle2,$OutputFile,5) = 0
		;Read line after line until error code indicates there are no lines anymore
		$Line = ReadLine($Handle1)
		While @ERROR = 0
			;If NOT event 560 occurred, write line to second file
			If NOT Split($Line,",")[5] = "560"
				$SO = WriteLine($Handle2,$Line + Chr(13) + Chr(10))
			EndIf
		$Line = ReadLine($Handle1)
		Loop
		;Close files
		$SO = Close($Handle1)
		$SO = Close($Handle2)
	Else
		$SO = Close($Handle1)
		? "Error opening File2"
		? "Error " + @ERROR + ": " + @SERROR
	EndIf
Else
	? "Error opening File1"
	? "Error " + @ERROR + ": " + @SERROR
EndIf

SHELL 'cscript eventquery.vbs /v /FI "Id eq 517" /FO CSV /l Security'

\File with type
REG_SZ and with the value

After doing this, I cud see an entry in Event viewer along with Application, System & Security. But unfortunately the following command still doesnt work:

cscript eventquery.vbs /l . If this works then any STANDALONE EVT file can be queried directly.
Has anybody tried the above ???