FullEventLogView Changelog

What's new in FullEventLogView 1.80

Sep 23, 2023
  • Added 'Black Background' option (Under the View menu). When it's turned on, the main table and the lower pane text-box are displayed in black background and white text, instead of default system colors.
  • Fixed issue: When copying data to the clipboard or exporting to tab-delimited file, every line contained an empty field in the end of the line.

New in FullEventLogView 1.78 (May 25, 2023)

  • Added 'Full Screen' mode (View -> Full Screen or F11 key).

New in FullEventLogView 1.77 (Apr 13, 2023)

  • Added 'Sort By' toolbar button.

New in FullEventLogView 1.76 (Feb 14, 2023)

  • Fixed issue: The 'Record ID' value was limited to the size of 32-bit integer.

New in FullEventLogView 1.75 (Nov 21, 2022)

  • Fixed the filter to work properly when new event items are added in 'Auto Refresh' mode.

New in FullEventLogView 1.74 (Oct 21, 2022)

  • Updated to stop the event log scanner when you press the Esc key.

New in FullEventLogView 1.73 (Oct 1, 2022)

  • The status bar now displays the current scanned event log channel/filename.

New in FullEventLogView 1.72 (Aug 28, 2022)

  • Fixed to work properly when specifying to filter more than 23 event IDs (Workaround for limitation of event log queries).

New in FullEventLogView 1.71 (Jun 20, 2022)

  • Fixed to display the time properly in AM/PM format.
  • Fixed the default columns size in high DPI mode.

New in FullEventLogView 1.70 (May 19, 2022)

  • Added option to choose a single event log filename (.evtx or .etl file) in the 'Choose Data Source' window.
  • You can also load a single event log file (.evtx or .etl file) by dragging it from Explorer window into the main window of FullEventLogView.

New in FullEventLogView 1.68 (Apr 16, 2022)

  • Added 'Add Header Line To CSV/Tab-Delimited File' option (Turned on by default).

New in FullEventLogView 1.67 (Dec 5, 2021)

  • Fixed the /srawxml command-line option to save the raw xml much faster than the previous versions.

New in FullEventLogView 1.66 (Nov 4, 2021)

  • 'Show Event Strings In Columns' option - You can now change the number of event string columns displayed when this option is turned on. You can do it by editing the following line in FullEventLogView.cfg (The default value is 10):
  • EventStringColumns=10
  • You have to edit this value while FullEventLogView is not running.

New in FullEventLogView 1.65 (Sep 30, 2021)

  • Added option to save the selected events as raw event XML (In 'Save Selected Items' option), which is the same XML you see in the lower pane when choosing Options -> Lower Pane Display Mode -> Show Event XML.
  • Added /srawxml command-line option to save the raw event XML from command-line.
  • Updated the HTML export feature to HTML5.
  • Added option to change the sorting column from the menu (View -> Sort By). Like the column header click sorting, if you click again the same sorting menu item, it'll switch between ascending and descending order. Also, if you hold down the shift key while choosing the sort menu item, you'll get a secondary sorting.

New in FullEventLogView 1.62 (Jun 16, 2021)

  • Added option to specify user name and password for connecting a remote computer (In the 'Choose Data Source' window). You have to use this option if you get 'Access is denied' error message when trying to connect the remote computer.

New in FullEventLogView 1.61 (Mar 25, 2021)

  • Fixed some high DPI mode issues.

New in FullEventLogView 1.60 (Jan 14, 2021)

  • Added 'Tray Balloon On New Event' option. This feature is active only when both 'Put Icon On Tray' and 'Auto Refresh' options are turned on. When it's active, FullEventLogView displays every new event in a tray balloon.
  • Added 'Start As Hidden' option. When this option and 'Put Icon On Tray' option are turned on, the main window of FullEventLogView will be invisible on start.

New in FullEventLogView 1.58 (Nov 22, 2020)

  • Added 'New FullEventLogView Instance' under the File menu, for opening a new window of FullEventLogView.

New in FullEventLogView 1.57 (Oct 16, 2020)

  • Added 'Log File' column, which displays the log filename if the event was loaded directly from .evtx or .etl file.

New in FullEventLogView 1.56 (Sep 22, 2020)

  • In the the channel and provider fields of the 'Advanced Options' window - you can now choose the desired channel/provider from a combo-box.

New in FullEventLogView 1.55 (Sep 1, 2020)

  • When reading .etl files that store the event data inside EventPayload element of the XML, FullEventLogView now automatically converts the EventPayload from hexadecimal string to readable text, and displays it as the decsription of the event.
  • For example, you can use this feature to view the Windows Update logs from C:windowslogsWindowsUpdate on Windows 10.
  • Added 'Copy Clicked Cell' option to the right-click context menu, which copies to the clipboard the text of cell that you right-clicked with the mouse.

New in FullEventLogView 1.53 (Jul 27, 2020)

  • Fixed bug: Wildcards didn't work when using the 'Search in full description string' option.
  • Fixed to save the 'Case Sensitive' option of the Quick Filter in the .cfg file.

New in FullEventLogView 1.52 (Feb 17, 2020)

  • Added 'Select All' and 'Deselect All' to the 'Column Settings' window.

New in FullEventLogView 1.51 (Jan 19, 2020)

  • Added the 'Clear All Events Of Selected Channel' option to the context menu.
  • Increase the maximum size of the description filter string.

New in FullEventLogView 1.50 (Nov 14, 2019)

  • Fixed bug: FullEventLogView remained in memory if you closed the main window during events scanning.
  • Added 'Clear All Events Of Selected Channel' option (Under the file menu). For example: If you select an event that its channel is 'System', using this option will delete all system events.
  • Added /ClearChannelEvents command-line option, which clears all events of the specified channel, for example:
  • FullEventLogView.exe /RunAsAdmin /ClearChannelEvents "Microsoft-Windows-Bits-Client/Operational"
  • Added 2 modes to description filter: 'Search in description parameters' and 'Search in full description string'. In previous versions, the search was made inside description parameters, but some people reported it's a bug. The search is now made by default inside the full description string, but this search mode is slower because it requires to load the metadata and format the description string before the filtering process.

New in FullEventLogView 1.38 (Oct 23, 2019)

  • Fixed bug: When trying to export events of remote computer from command-line, FullEventLogView loaded the events from local computer.

New in FullEventLogView 1.37 (Aug 27, 2019)

  • Added 'Case Sensitive' option to the Quick Filter window.

New in FullEventLogView 1.36 (May 6, 2019)

  • Added /RunAsAdmin command-line option for running FullEventLogView as administrator.

New in FullEventLogView 1.35 (Feb 21, 2019)

  • Added new options to the 'Quick Filter' feature, including the option to filter the list by Event ID.

New in FullEventLogView 1.32 (Jan 25, 2019)

  • When choosing to load only specific event IDs (From 'Advanced Options' window), the loading process is much faster.

New in FullEventLogView 1.31 (Nov 26, 2018)

  • Fixed bug: When connecting a remote computer the following error was displayed - Error 50: The request is not supported.

New in FullEventLogView 1.30 (Nov 8, 2018)

  • Fixed bug: FullEventLogView failed to display the event strings in the lower pane ('Show Event Data + Description' mode) and in the columns ('Show Event Strings In Columns' option).
  • You can now resize the properties window, and the last size/position of this window is saved in the .cfg file.
  • You can now send the data to stdout by specifying empty string as filename, for example:
  • FullEventLogView.exe /scomma "" | more

New in FullEventLogView 1.28 (Jun 25, 2018)

  • Fixed the lower pane to use the right font size in high DPI mode.
  • Added option to choose another font (name and size) to display in the main window.

New in FullEventLogView 1.27 (Jun 18, 2018)

  • When exporting items with multiline description to tab-delimited file (Including the 'Copy Selected Items' option), FullEventLogView now put the description in quotes to ensure the exported data will be displayed properly in Excel and other programs.

New in FullEventLogView 1.26 (Mar 14, 2018)

  • Added support for saving as JSON file.

New in FullEventLogView 1.25 (Dec 6, 2017)

  • Added 'Show Event Strings In Columns' option (Under the Options menu). When it's turned on, 10 new event string columns are added to the main table ('String 1', 'String 2', 'String 3'...). These columns display the strings from the event decsription and you can click the column header in order to sort the events according to the event strings.

New in FullEventLogView 1.22 (Jun 29, 2017)

  • Fixed bug: On some systems, FullEventLogView missed some of the events when using a time filter.

New in FullEventLogView 1.21 (May 30, 2017)

  • Added /cfg command-line option, which instructs FullEventLogView to use a config file in another location instead if the default config file, for example:
  • FullEventLogView.exe /cfg "%AppData%FullEventLogView.cfg"

New in FullEventLogView 1.20 (Apr 27, 2017)

  • Added option to filter according to strings of the event description (In 'Advanced Options' window).
  • Added 'Quick Filter' feature (View -> Use Quick Filter or Ctrl+Q). When it's turned on, you can type a string in the text-box added under the toolbar and FullEventLogView will instantly filter the events table, showing only lines that contain the string you typed.
  • Fixed the lower pane to switch focus when pressing tab key.

New in FullEventLogView 1.12 (Jan 20, 2017)

  • Added option to specify time range in GMT ('Advanced Options' window).
  • Fix bug: When using /SaveDirect command-line option, the file was always saved according to the default encoding, instead of using the selected encoding in Options -> Save File Encoding.

New in FullEventLogView 1.11 (Dec 25, 2016)

  • Fixed bug: the process of exporting large amount of event log items from command-line was very slow, even when using /SaveDirect.

New in FullEventLogView 1.10 (Dec 13, 2016)

  • Added option to automatically read archive log files (In 'Choose Data Source' window). This option works only when you run FullEventLogView as administrator.

New in FullEventLogView 1.06 (Nov 3, 2016)

  • Fixed FullEventLogView to display event description properly when reading .evtx files from shadow copy (e.g: \?GLOBALROOTDeviceHarddiskVolumeShadowCopy3WindowsSystem32winevtLogs )
  • Fixed bug: FullEventLogView displayed error message when trying to read .etl files.

New in FullEventLogView 1.05 (Oct 15, 2016)

  • FullEventLogView now displays an error message if it fails to load events from external evtx file or from remote computer
  • Added 'Choose Data Source' icon to the toolbar