SystemRequires admin/root

Event Log Archives

Windows Event Log archives are .evtx channel files stored under %WinDir%\System32\winevt\Logs, where services and applications append structured event records for auditing, diagnostics, crash reporting, and operational history. As channels roll over, these archives accumulate historical entries, index metadata, record chunks, and slack space left behind after retention changes or log truncation. Kudu removes old archived .evtx log files to reclaim disk space without touching user documents, accounts, passwords, or application settings.

Why clean Event Log Archives?

  • Large archived .evtx files accumulate after repeated crashes, update failures, or verbose auditing, and the most obvious symptom is steadily shrinking free space on the system drive
  • Channels with years of rollover history leave behind many old event chunks, so Event Viewer searches and exports can feel slower while Windows scans oversized logs
  • Retention policy changes do not shrink existing archive files, which means disk usage stays high even after you lower log sizes or disable noisy logging
  • Archived logs often preserve thousands of repeated errors from a resolved issue, making Event Viewer harder to read because current problems are buried under old noise
  • Corrupted or partially written archive logs from abrupt shutdowns can trigger Event Viewer read errors or failed exports when you open historical channels
  • Security, setup, and application logs can grow rapidly on servers or heavily used PCs, and the user-visible result is backup jobs, disk imaging, or antivirus scans taking longer because there are more large system files to process
  • Event log storage can become internally fragmented across many record chunks over time, and reducing retained history removes stale archives even though this does not rewrite active .evtx files the way a database VACUUM would
What gets cleaned

Cache paths Kudu targets

Windows

%WinDir%/System32/winevt/Logs
Frequently asked

Common questions about Event Log Archives

Free & open source

Download Kudu and reclaim your disk space.

Available on Windows, macOS, and Linux. No account required, no feature gates, no telemetry without consent. All cleaning targets are open source and community-auditable.