June 2019 Patch Tuesday Event Viewer bug

Microsoft confirmed that the June 2019 Patch Tuesday updates introduced a new issue for Windows users. The Redmond giant says that these updates trigger a bug in the Event Viewer app when you use Customer Views.

This issue affects all those users who updated their devices with the security-only updates, monthly rollups, and cumulative updates released on this Patch Tuesday edition.

According to the official support note, this problem affected almost all versions of Windows 10, Windows 8.1, Windows 7 and Windows Server.

Event Viewer bug

Microsoft explained the issue in the following manner:

When trying to expand, view or create Custom Views in Event Viewer, you may receive the error, “MMC has detected an error in a snap-in and will unload it.” and the app may stop responding or close. You may also receive the same error using Filter Current Log in the Action menu with built-in views or logs. Built-in views and other features of Event Viewer should work as expected.

How to fix Event Viewer bugs after update

The good news is Microsoft suggested a temporary workaround to fix the issue. The tech giant says that you should launch PowerShell with administrator privileges. 

  1. Press Windows key + X, you will see a list of options.
  2. Click Windows PowerShell (Admin) to open PowerShell. 
  3. Copy the code mentioned below and paste it in the new Window opened in front of you.
function get-EventViewer {
                Write-Output "List of custom views on the machine"
                Write-Output ""
                Get-ChildItem "C:ProgramDataMicrosoftEvent ViewerViews" -Filter *.xml | % { select-xml -Path $_.FullName -xpath "//Name" } | Select-Object -ExpandProperty Node | Select-Object -ExpandProperty InnerXml
                Write-Output ""
                $view_name = Read-Host "Enter the name of custom view to execute"
                # Get the file name of the view
                $ViewFile = Get-ChildItem "C:ProgramDataMicrosoftEvent ViewerViews" -Filter *.xml | where-object { (Select-Xml -Path $_.FullName -xpath "//Name").Node.InnerXml -eq $view_name }
                Get-WinEvent -FilterXml ([xml]((Select-Xml -Path $ViewFile.FullName -XPath "//QueryList").node.OuterXml))
}

Microsoft promised to release a permanent solution in late June. However, you can use this method to create new views and see custom views that already exist.

Microsoft will release a new batch of cumulative updates in two weeks’ time. Meanwhile, you can develop custom scripts to fix the issue on a temporary basis. 

Alternatively, you can also use one of these event viewer software solutions.

RELATED ARTICLES YOU NEED TO CHECK OUT: