Clear-EventLog

-ComputerName [<string[]>]

Specifies a remote computer. The default is the local computer.

Type the NetBIOS name, an Internet Protocol (IP) address, or a fully qualified domain name of a remote computer. To specify the local computer, type the computer name, a dot (.), or "localhost".

This parameter does not rely on Windows PowerShell remoting. You can use the ComputerName parameter of Get-EventLog even if your computer is not configured to run remote commands.

-LogName [<string[]>]

Specifies the event logs. Enter the log name (the value of the Log property; not the LogDisplayName) of one or more event logs, separated by commas. Wildcard characters are not permitted. This parameter is required.

-Confirm [<SwitchParameter>]

Prompts you for confirmation before executing the command.

-WhatIf [<SwitchParameter>]

Describes what would happen if you executed the command without actually executing the command.

EXAMPLE 1

C:\PS> clear-eventlog "Windows PowerShell"

This command deletes the entries from the "Windows PowerShell" event log on the local computer.

EXAMPLE 2

C:\PS> clear-eventlog -logname ODiag, OSession -computername localhost, Server02

This command deletes all of the entries in the Microsoft Office Diagnostics (ODiag) and Microsoft Office Sessions (OSession) logs on the local computer and the Server02 remote computer.

EXAMPLE 3

C:\PS> clear-eventlog -log application, system -confirm

This command prompts you for confirmation before deleting the entries in the specified event logs.

EXAMPLE 4

C:\PS> function clear-all-event-logs ($computerName="localhost")
{
    $logs = get-eventlog -computername $computername -list | foreach {$_.Log} 
    $logs | foreach {clear-eventlog -comp $computername -log $_ }
    get-eventlog -computername $computername -list
}

C:\PS> clear-all-event-logs -comp Server01

  Max(K) Retain OverflowAction        Entries Log                                                                                                      
  ------ ------ --------------        ------- ---                                                                                                      
  15,168      0 OverwriteAsNeeded           0 Application                                                                                               
  15,168      0 OverwriteAsNeeded           0 DFS Replication                                                                                           
     512      7 OverwriteOlder              0 DxStudio                                                                                                  
  20,480      0 OverwriteAsNeeded           0 Hardware Events                                                                                           
     512      7 OverwriteOlder              0 Internet Explorer                                                                                         
  20,480      0 OverwriteAsNeeded           0 Key Management Service                                                                                    
  16,384      0 OverwriteAsNeeded           0 Microsoft Office Diagnostics                                                                              
  16,384      0 OverwriteAsNeeded           0 Microsoft Office Sessions                                                                                 
  30,016      0 OverwriteAsNeeded           1 Security                                                                                                  
  15,168      0 OverwriteAsNeeded           2 System                                                                                                    
  15,360      0 OverwriteAsNeeded           0 Windows PowerShell

This function clears all event logs on the specified computers and then displays the resulting event log list.

Notice that a few entries were added to the System and Security logs after the logs were cleared but before they were displayed.