Solved

Very Odd anyone see Event Viewer do this before?

Posted on 2003-10-31
8
618 Views
Last Modified: 2010-03-18
2k4 Server.

When I look at at event the event view System Log the screen is blank even though it says that there are 2,347 events.

The other logs will also show a blank screen with 0 events but if I refresh then numerous events show up.

No matter how many time I refresh on the System Log I cannot see the events.

If I export the events and copy them to another computer then I can see the events.

I have never seen this behavior before, anyone else?
0
Comment
Question by:praflik
8 Comments
 
LVL 5

Expert Comment

by:juliancrawford
ID: 9661586
When a log is very large and your PC not so fast then there can be quite a delay for the log to appear.
Have you tried waiting a few minutes?
0
 
LVL 1

Author Comment

by:praflik
ID: 9672013
The server is only six months old.  The behavior started just recently after the upgrade to SP4.  Proc is 2.0G and it is not a very busy srever.  This was working just fine.
0
 
LVL 5

Accepted Solution

by:
vtobusman earned 50 total points
ID: 9672050
 I have seen this and it has to do with the large files heres what i did...
 right click on the log and go to properties  verify the max size is like 512k
and then click the box that says " Overwrite as needed "

   You will have to clear the log then it will start working since i have done this i have had no issues...

  Hope it works for you ... Good Luck
0
 
LVL 1

Author Comment

by:praflik
ID: 9673484
Thank you.  Clearing the log has fixed the problem.
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 5

Expert Comment

by:vtobusman
ID: 9673550
 remember to check the box overwrite as necessary and it wont happen again
0
 

Expert Comment

by:foxp44
ID: 9693198
I have had this on a number of occasions

Causeed by blaster stopping the svchost rpc service.

check your network for msblaster
0
 
LVL 1

Author Comment

by:praflik
ID: 9701828
vtobusman,

Overwrite was nad is checked.  Log was only 512k.  Clearing fixed the problem so the problem wasn't a too large log file but the same fix applied.

foxp44, no blaster, we are well protected against that bugger.
0
 

Expert Comment

by:andrewwarby
ID: 10327410
Please view Microsoft Knolegebase article #: 829246 for a permantent fix for this bug.

You will need to contact Microsoft Product Support services to request this Post SP4 Patch

The problem is cuased by the Event Log not wrapping and becoming corrupt.

The other acceptable fix is to Disable the Event Service, restrt the server, delete the .Evt files enable the Event Service and reboot the server. Then set the Event Logs to automatically overwrite once they reach the set size (e.g. 512kb)

The best permantent fix though is the patch.

Cheers,
Andrew
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now