Solved

Very Odd anyone see Event Viewer do this before?

Posted on 2003-10-31
8
621 Views
Last Modified: 2010-03-18
2k4 Server.

When I look at at event the event view System Log the screen is blank even though it says that there are 2,347 events.

The other logs will also show a blank screen with 0 events but if I refresh then numerous events show up.

No matter how many time I refresh on the System Log I cannot see the events.

If I export the events and copy them to another computer then I can see the events.

I have never seen this behavior before, anyone else?
0
Comment
Question by:praflik
8 Comments
 
LVL 5

Expert Comment

by:juliancrawford
ID: 9661586
When a log is very large and your PC not so fast then there can be quite a delay for the log to appear.
Have you tried waiting a few minutes?
0
 
LVL 1

Author Comment

by:praflik
ID: 9672013
The server is only six months old.  The behavior started just recently after the upgrade to SP4.  Proc is 2.0G and it is not a very busy srever.  This was working just fine.
0
 
LVL 5

Accepted Solution

by:
vtobusman earned 50 total points
ID: 9672050
 I have seen this and it has to do with the large files heres what i did...
 right click on the log and go to properties  verify the max size is like 512k
and then click the box that says " Overwrite as needed "

   You will have to clear the log then it will start working since i have done this i have had no issues...

  Hope it works for you ... Good Luck
0
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

 
LVL 1

Author Comment

by:praflik
ID: 9673484
Thank you.  Clearing the log has fixed the problem.
0
 
LVL 5

Expert Comment

by:vtobusman
ID: 9673550
 remember to check the box overwrite as necessary and it wont happen again
0
 

Expert Comment

by:foxp44
ID: 9693198
I have had this on a number of occasions

Causeed by blaster stopping the svchost rpc service.

check your network for msblaster
0
 
LVL 1

Author Comment

by:praflik
ID: 9701828
vtobusman,

Overwrite was nad is checked.  Log was only 512k.  Clearing fixed the problem so the problem wasn't a too large log file but the same fix applied.

foxp44, no blaster, we are well protected against that bugger.
0
 

Expert Comment

by:andrewwarby
ID: 10327410
Please view Microsoft Knolegebase article #: 829246 for a permantent fix for this bug.

You will need to contact Microsoft Product Support services to request this Post SP4 Patch

The problem is cuased by the Event Log not wrapping and becoming corrupt.

The other acceptable fix is to Disable the Event Service, restrt the server, delete the .Evt files enable the Event Service and reboot the server. Then set the Event Logs to automatically overwrite once they reach the set size (e.g. 512kb)

The best permantent fix though is the patch.

Cheers,
Andrew
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
AutoCad licenses 9 86
Domain join remote sites or not 3 67
Error 0X800704C8 - Plex App 2 46
Clearing the ConflictAndDeleted Folder in DFSR 8 158
The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question