This documentation is archived and is not being maintained.

EventLog::Delete Method (String, String)

Updated: December 2010

Removes an event log from the specified computer.

Namespace:  System.Diagnostics
Assembly:  System (in System.dll)

static void Delete(
	String^ logName, 
	String^ machineName


Type: System::String

The name of the log to delete. Possible values include: Application, Security, System, and any custom event logs on the specified computer.

Type: System::String

The name of the computer to delete the log from, or "." for the local computer.


logName is an empty string ("") or nullptr.

- or -

machineName is not a valid computer name.


The registry key for the event log could not be opened on the specified computer.

- or -

The log does not exist on the specified computer.


The event log was not cleared successfully.


The log cannot be opened. A Windows error code is not available.

Use this method when the log you want to delete is on a remote computer. You can delete any log on the computer, provided you have the appropriate registry permissions.

Delete removes the log specified by logName from the computer specified by machineName. If you want to delete only the source registered to a log, call DeleteEventSource. If you only want to delete the log entries, call Clear. Delete and DeleteEventSource are static methods, so they can be called on the class itself. It is not necessary to create an instance of EventLog to call either method.

The Delete(String) method first deletes the file that holds the contents of the log. It then accesses the registry and removes all the event sources registered for that log. If you recreate the log at a later point, you should register the event sources again, if they are to be reused. If you do not register the event sources and other users write to an event source without specifying a log name, the event source will be created in the Application event log. Therefore, applications that previously were able to write entries to the log you deleted and recreated will write to the Application log instead, because it now contains the event source.


Recreating an event log can be a difficult process. Avoid deleting any of the system-created event logs, such as the Application log.

Deleting a log through a call to Delete automatically deletes the sources registered to that log. This can make other applications using that log inoperative.

The following example deletes a log from the specified computer. The example determines the log from its source.


More than one source might write to an event log. Before deleting a custom log, make sure there are no other sources writing to that log.

#using <System.dll>

using namespace System;
using namespace System::Diagnostics;
using namespace System::Threading;
int main()
   String^ logName;
   if ( EventLog::SourceExists( "MySource", "MyMachine") )

      // Find the log associated with this source.    
      logName = EventLog::LogNameFromSourceName( "MySource", "MyMachine" );
	  // Make sure the source is in the log we believe it to be in 
      if (logName != "MyLog")
		  return -1;
      // Delete the source and the log.
      EventLog::DeleteEventSource( "MySource", "MyMachine" );
      EventLog::Delete( logName, "MyMachine" );
      Console::WriteLine( "{0} deleted.", logName );
            // Create the event source to make next try successful.
			EventSourceCreationData^ mySourceData = gcnew EventSourceCreationData("MySource", "MyLog");
            mySourceData->MachineName = "MyMachine";

Windows 7, Windows Vista, Windows XP SP2, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP Starter Edition, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows Server 2000 SP4, Windows Millennium Edition, Windows 98

The .NET Framework and .NET Compact Framework do not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

.NET Framework

Supported in: 3.5, 3.0, 2.0, 1.1, 1.0




December 2010

Updated remarks about deleting source names, and replaced the code example.

Customer feedback.