Remove EventLog - PowerShell


The Remove-EventLog cmdlet removes an event log from the local computer or a remote computer. Event logs are collections of events that are generated by applications and system components. You can use the Remove-EventLog cmdlet to remove event logs that are no longer needed or that are causing problems.


Remove-EventLog [-LogName] <string> [-ComputerName] <string> [-Confirm] [-WhatIf] [-Force]


  • -LogName: Specifies the name of the event log to remove.
  • -ComputerName: Specifies the name of the computer from which to remove the event log.
  • -Confirm: Prompts you to confirm the operation before executing it.
  • -WhatIf: Shows what would happen if the command was executed without actually executing it.
  • -Force: Suppresses the confirmation prompt and removes the event log without asking for confirmation.


Example 1: Remove the Application event log

Remove-EventLog -LogName Application

Example 2: Remove the System event log from a remote computer

Remove-EventLog -LogName System -ComputerName server1

Example 3: Remove all event logs from a computer

Get-EventLog | Remove-EventLog

Common Issues

One common issue that you may encounter when using the Remove-EventLog cmdlet is that you may not have sufficient permissions to remove the event log. To resolve this issue, you must run the command from an elevated Windows PowerShell prompt.


The Remove-EventLog cmdlet can be used in conjunction with other PowerShell cmdlets to manage event logs. For example, you can use the Get-EventLog cmdlet to get a list of all event logs on a computer, and then use the Remove-EventLog cmdlet to remove the event logs that you no longer need.