I must be overlooking the obvious, because I've searched & searched, yet found nothing.
How do you clear old results in the event viewer, but leave the actual physical backups on that drive?
I have some red 'X''s in the event viewer, errors caused by my doing, that I'd like to remove to stop my heart from skipping a beat every time I peek in there.
Thank you
What product are you using?
Ooops...NGH15
Look in the folder.. ProgramData\Symantec\Norton Ghost\Logs
If you don't mind losing all of the history and backup schedules, you can thy this..
If not, a full uninstall / reinstall should do it.
Isn't there a way just to delete just the history? I've uninstalled before using Control Panel & the Norton Removal Tool, which obviously removed the program, but the history stood firm. I selected "no" to the question, "would you like to keep...", when I uninstalled also.
It seems insane to me that there isn't a 'Delete Past History' in Tools or Advanced somewhere.
Yes, go to services and stop the Norton Ghost service. Search in explorer for and delete all the .pqh files in the directory Ghost is loaded in.
Example : C:\ programme Data\Symantec\Norton Ghost\ History, you can reboot or restart the services.
Deric
Deric,
That won't clear the event log.
I think I would search for some of the text in the area the I mentioned above.
Or, uninstall, delete the whole folder that I mentioned above, then reinstall.
Or. just don't worry about it. There are plenty of other things to worry about!
What happens when you go to: Tasks > Options
and set the size of the logfile to 0 or 1?
Dave
You can only go down to 100KB..
I tried to turn all off and reduce to 100KB, but stuff remained even after stopping and restarting the service. I did not try a reboot though.
Thanks Red, I didn't want to try it.
But it sure looks like the same data in the file Norton Ghost.log.txt
Sorry I thought he said history.
Deric
I tried clearing most data in Norton Ghost.log.txt. It is remembered somewhere else. I'm guessing one or more of the dbg files. The only time I'd be willing to try to clear more is at the end of the month after my last incremental is done. I hate screwing things up and having to start a new recovery point set in he middle of the month.
I did a little more digging. I had an installation of SSR 2013 installed in Virtual PC. This is Ghost's enterprise cousin and is very similar. I stopped all related services and closed VProTray. I deleted the whole Symantec folder that is under Program Data. I restarted the services and VProTray. The history and schedules were gone. Event viewer still had all entries!I'm not sure wher this information is coming from. Maybe the registry?
My advice, just ignore the event viewer!
I FOUND IT!!!
It is in the WINDOWS Event log.
Start > Type "Event Viewer" in the Search box.
Windows Logs > Application > filter by source. I don't think you can selectively delete certain items. Only the whole thing.
To delete individual entries...
http://www.nirsoft.net/utils/my_event_viewer.html
The windows event viewer is what's mirrored in Ghost's event viewer?? Lololol...thanks all! Kudo's to Red.
