Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
You can schedule a command to clear a Windows 11 event log, but wevtutil cl erases every entry in the named log—not just older ones. If your goal is to manage log growth while keeping recent events, configure the log’s size and overwrite or backup behavior instead. Those are different approaches: choose a scheduled full clear only when removing the entire log is acceptable.
Choose between clearing a log and managing its retention
| Approach | What happens | When it runs |
|---|---|---|
| Scheduled full clear | All entries in the named log are removed. You can save a backup as part of the clear command. | When the scheduled task runs. |
| Size and retention settings | The log responds to reaching its configured maximum size. Depending on the setting, older entries are overwritten or incoming entries are discarded; automatic backup is also available. | When the log reaches its size limit. |
Microsoft’s wevtutil command documentation applies to Windows 11 and covers clearing logs, exporting and archiving them, and changing log settings.
Schedule a full clear with wevtutil
First, confirm the exact log name you intend to clear. The following example clears the Application log:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
wevtutil cl "Application"To save the log before clearing it, use the optional /bu: argument:
#1 Best Overall
- Connectivity: Includes WiFi, Bluetooth, and LAN for wireless and wired connections
- Memory: Features 16GB DDR4 RAM for smooth multitasking and performance
- Storage: Combines 500GB SSD and 1TB HDD for ample storage space
- Graphics: Integrated Intel UHD Graphics 630 for crisp visuals and video playback
- Design: Sleek desktop tower with black color and slim profile for modern look
wevtutil cl "Application" /bu:"C:LogsApplication-before-clear.evtx"The path is an example, not a required Windows location. Choose a destination that exists, is writable by the account running the task, and is protected appropriately for the event data. After running the command, verify that the backup file was created and is usable before relying on it.
Set up the scheduled task
Task Scheduler can run a command or script on a trigger you choose. Microsoft Q&A has community guidance for a scheduled-task pattern, but it is not a formal product guide. Before making the task recurring, run the command manually, confirm that it targets the intended log, and verify any backup.
Rank #2
- [INTEL POWERED CONTENT] - Built with a 8th Generation Hexa-Core Intel i5 and 32GB of DDR4 RAM; Modern, Windows 11 ready, with 4K support, Executive multitasking, media streaming and smooth, multi-tab web browsing; Perfect as an all-purpose multimedia computer; built for content creators; Plenty of RAM and Mass storage for photo and video editing powered by Intel HD 630
- [LATEST WIRELESS TECH] - This Dell Desktop Computer easily connects to the internet through the Built In WiFi / Bluetooth
- [SOLID STATE STORAGE] - This Dell Computer setup comes with an ultra-fast 1TB Solid State Drive (SSD); Setup as the primary boot device; Boot and load programs with lightning speed ; Additional expansion available
- [BUY & OWN WITH CONFIDENCE] - From the world's largest Microsoft Authorized Refurbisher; Quality Guarantee and Free Tech Support; Award-winning Customer Service; | Support Sustainable Business
- [MODERN HI-SPEED PORTS] - USB 3.0 (x4) | USB 2.0 (x4) | DisplayPort (x1) | HDMI Port (x1) | Audio Combo Jack (x1) | Audio Out (x1) | RJ-45 Ethernet (x1) | Internal SATA (x3)
- Open Task Scheduler and create a task with the trigger you want, such as a recurring schedule.
- Configure its action to run the command or a script containing the tested
wevtutil clcommand. - Set the task to run under an account with the permissions required to clear that log and write to the backup destination, if used.
- Run the task once on demand and check its result and any backup file before relying on the recurring trigger.
The exact task settings depend on the account, trigger, and destination you choose. Microsoft’s community example is available in “How to set the retention period of event log in the event viewer in days”; its filtering example should not be treated as a selective-delete method.
Configure a log to manage growth without a scheduled full clear
Use wevtutil sl to change a log’s settings, including its maximum size, retention behavior, and automatic backup behavior. The relevant choice is what Windows should do when that log reaches its configured size:
Rank #3
- Model: Dell OptiPlex 7050 Small Form Factor (SFF)
- Processor: Intel Core i7-7700 3.60 GHz
- Memory: 32GB DDR4 Ram
- Storage: 1TB Solid State Drive (SSD) Fast Boot + Storage
- Operating System: Windows 11 Pro (64-bit)
- Overwrite as needed: With retention disabled, incoming events can overwrite the oldest events.
- Keep existing events: With retention enabled, existing entries are retained and incoming events are discarded once the log reaches its limit.
- Back up automatically: The
/ab:trueoption enables automatic backup when the log reaches its maximum size. Microsoft documents that automatic backup requires/rt:trueas well.
These settings are capacity-based, not age-based: they do not mean “delete entries older than a chosen number of days.” Consult the wevtutil syntax and options for the exact settings and the log you are configuring.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why an age filter followed by wevtutil cl still clears everything
A script that checks whether a log contains old events and then runs wevtutil cl does not selectively remove those old entries. The clear command operates on the entire named log, so newer entries in it are removed too. The Microsoft Q&A example demonstrates this risk: an age check does not make the subsequent whole-log clear selective.
Know which PowerShell event-log tools apply
Microsoft’s Limit-EventLog reference describes size, retention, and overflow settings for classic event logs only. It should not be treated as a way to configure every modern Windows Event Log channel. For reading logs in the Windows Event Log technology used by Vista and later Windows versions, Microsoft directs users to Get-WinEvent.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
