You can also use the format command, with different parameters, from the Recovery Console. For more information about the Recovery Console, see Windows Recovery Environment (Windows RE).
The format command creates a new root directory and file system for the disk. It can also check for bad areas on the disk, and it can delete all data on the disk. To be able to use a new disk, you must first use this command to format the disk.
We are planning to collect WIndows security events with Splunk. As far as I know, there are two formats: standard and XML with renderXML=1 option.
I've have found some (older) blog/answers questions which says searching with the xml format can be very slow...
So which one should we choose, which format is recommended currently? Pros and cons? Can somebody help me to decide?
@ikulcsar Personally I favor the normal format over XML - Its easier to read if you are digging through the events.
There are however, some advantages with the XML logs - most notably if you ingest lots of them they are smaller. (Think of your poor licence)
The 'normal' includes lots of boiler plate text which is just noise - we strip this pointless text out thereby shrinking the event size which gives us the best of both worlds.
As some others have noted, sometimes the field extractions can be a bit 'iffy' with XML, but in fairness I have a few servers which randomly start sending double space lines, and that breaks the normal format field extractions too.
I also ran some bench marking on our system and we found that searching 'normal' events was markedly faster than the XML version of the same data - I think I have read posts where people found the opposite.
I have a problem and thought this would be the best post to explain. I currently have a UF installed on a host sending windows security logs to index=wineventlogs in non-XML format (which is what I want). The issue is that the same host is sending the window security logs in xml to index=main, and I cannot find the reason why. I have installed the Splunk App for Win Infra (1.5.0), Win_TA (5.0.1) and Splunk Add on for AD/DNS (1.0.0/1.0.1) on my SH, IDX and UF (where needed).
Maybe there left some old confs somewhere in the other apps. Be careful, the new Windows add-on didn't create and configure indexes for inputs. This could cause been used the default index. Check the docs, please.
@ikulcsar, If within Event Viewer you compare the default mode and XML mode, you will notice that XML has all the details while default mode shows you basic information about the event. If your use case does not require you to pull all the details, you can get the default data rather than getting XML which would obviously be faster because lesser details are being indexed per event. However, if your intent of pulling XML Event Viewer Log is to use some of the additional details then you do not have a choice but to turn on renderXML.
Both from 2016.. this is why I asked this question and try to get up-to-date information about this topic in general. And I prefer the answers be with explanations if possible, not just a yes/no. I have to build the system, so I should understand it how it works.
This article was co-authored by wikiHow staff writer, Nicole Levine, MFA. Nicole Levine is a Technology Writer and Editor for wikiHow. She has more than 20 years of experience creating technical documentation and leading support teams at major web hosting and software companies. Nicole also holds an MFA in Creative Writing from Portland State University and teaches composition, fiction-writing, and zine-making at various institutions.
The wikiHow Tech Team also followed the article's instructions and verified that they work.
This article has been viewed 29,032 times.
Learn more...
This wikiHow teaches you how to format any hard drive connected to your Windows 10 PC. If you just want to format one drive connected to the PC, you can do so using the Disk Management tool. If you want to completely erase all data, reformat the hard drive, and reinstall Windows, you can use the Reset this PC feature in your settings. Be sure to back up your personal files and serial numbers before formatting your PC.
When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. Neither ZDNET nor the author are compensated for these independent reviews. Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers.
ZDNET's editorial team writes on behalf of you, our reader. Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. Our editors thoroughly review and fact-check every article to ensure that our content meets the highest standards. If we have made an error or published misleading information, we will correct or clarify the article. If you see inaccuracies in our content, please report the mistake via this form.
Here's one scenario that most of us have likely faced. You're bumping into a persistent problem in Windows 10. Maybe the PC keeps crashing or blue-screening, or perhaps certain features aren't working properly. You've exhausted all the usual troubleshooting steps, from running the built-in troubleshooters to reinstalling drivers to checking your PC for hardware issues. But the problem persists.
And here's another scenario. You're jumping ship to a brand-new computer and have no further need for your old machine. Maybe you hope to sell it or perhaps you aim to give it away or donate it. But before you give it the heave-ho, you need to erase all traces of yourself and your data.
One way to address either scenario is by setting your PC back to factory conditions, so it's a clean state. This type of move will often resolve mysterious and seemingly unsolvable technical snafus. And if you don't plan to keep the PC, a reset can remove all your personal files, settings, and applications.
Before you perform a reset, you need to know the consequences. You can choose whether or not to preserve your personal files. But the reset will remove all installed applications and customized settings.
If your goal is to get rid of your PC, that's great. But if you're striving to fix a technical issue and plan to continue using the computer, you'll need reinstall all your applications and reconfigure whatever settings you previously tweaked.
The next window asks if you wish to keep your files or remove everything. If you're attempting to fix a technical glitch, choose the first option to keep your files. If you're looking to hand off or otherwise get rid of your PC, choose the second option to remove everything.
The next window asks how you want to reinstall Windows -- cloud or local. A local reinstall typically runs faster but uses a copy of the necessary system files saved on your computer. If those files are missing or corrupted, then the local reinstall won't work. Your best bet is to try the local reinstall first. If that doesn't work, then go for the cloud reinstall.
The next screen for additional settings lets you change anything before proceeding. If all looks good, click Next. Otherwise, click the link for Change settings. If you opted to keep your personal files, you can now decide whether you want preinstalled apps to be reinstalled and whether you want Windows downloaded from the cloud.
If you instead chose to remove everything, you can opt to have your data cleaned. Select this option if you plan to give your PC away as it will overwrite your personal data, thus making it more difficult for anyone to recover your files even with the right recovery tool. Click Confirm and then click Next.
The final screen before the reset confirms the outcome. To see a list of the apps that you'll need to reinstall, click the link for View apps that will be removed. (You may wish to make note of any you plan to reinstall.) When ready, click the Reset button.
The reset then kicks off. After it's finished, your PC will reboot and deposit you at the lock screen. If you plan to give the PC away, click on the lock screen, click the power button, and then shut down the computer. If you reset the PC to resolve a technical problem, sign in and then try to duplicate the behavior that caused the glitch to see if your computer is now behaving itself. If so, then you'll want to start reinstalling any apps that were removed in the reset.
I have an excel column that includes dates currently formatted as MM/DD/YYYY. I want it formatted as YYYY/MM/DD. When I go to format cells and change the date format, nothing changes. If I try to change the cells to any other type of cell - general, text, number, time, whatever - nothing changes.
d3342ee215