Read events from event viewer faster in Windows

Sep 24, 2019

Slow Event Viewer from Windows 7/2008 version

Everyone knows the Windows Event Viewer eventvwr.msc which sometimes takes many minutes to open or even stops when there is too much data to load.

If you knew Windows Server 2003 / Windows XP, you know the event viewer of this time was a lot faster …

Good news, the old event viewer still exists on new systems (even on Windows 10 / Windows Server 2016/2019), follow the article.

Back to old version

Just open a CMD in administrator mode and execute:

regsvr32 els.dll

This allows the load the module of the old event viewer (the usual event viewer continues to exist without impact).

Then, from an MMC, add the Classic Event Viewer component.

Events load instantly, no need to wait for long minutes. Custom views will be of course missing, but it is still possible to filter the results via View > Filter and other features, which is more than enough for the majority of cases.

Tags

Bastien Perez

Freelance Microsoft 365 - Active Directory - Modern Workplace