Solved

Event log doesn't overwrite as needed in SP4

Posted on 2003-11-05
10
342 Views
Last Modified: 2010-04-13
Hello All,
After upgrading from SP3 to SP4 on several Windows 2000 PRO machines everything looked fine, but from time to time applications can't write to the event log.
When I try to view the application event log it appears to be empty. If I "clear all events" and re-start the service, the problem is fixed and applications can write to the event log. But it usually repeats itself after a few hours/days.

I could replicate this problem several times and it is very disturbing because I have many applications writing to the event log.
The application event log is set to "overwrite events as needed'.

Any ideas?

0
Comment
Question by:idophir
  • 4
  • 2
  • 2
  • +1
10 Comments
 
LVL 49

Expert Comment

by:sunray_2003
Comment Utility
Check this

you may get some idea


http://www.labmice.net/troubleshooting/EventLog.htm

Sunray
0
 

Author Comment

by:idophir
Comment Utility
Couldn't find anything.
0
 
LVL 49

Expert Comment

by:sunray_2003
Comment Utility
0
 

Author Comment

by:idophir
Comment Utility
The event log is proparly configured - it just not working as it should.
The first link shows a way to clear the log using a script. I might use it if I won't find any other solution but I don't like it.
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 15

Expert Comment

by:Rob Stone
Comment Utility
Try going back to SP3 on one machine and see if it still happens.  If it doesn't, reapply SP4 and hope it works OK.
0
 

Author Comment

by:idophir
Comment Utility
It worked fine with SP3.
It happened on many machines including in a different company - I don't think re-applying will help.
0
 
LVL 15

Expert Comment

by:Rob Stone
Comment Utility
There are a lot of bugs with SP4 so it might be worth just keeping on SP3 with latest patch's until SP4a/SP5 comes out.
0
 

Author Comment

by:idophir
Comment Utility
That is always a good advice - always be one step behind with MS products.
However, I don't want to go back to SP3 because I would hate to test the MS uninstall utility.
0
 

Accepted Solution

by:
royaleflan earned 400 total points
Comment Utility

I am also experiencing this same problem (event log not overwriting as needed) on W2K systems in the field.

You might want to try this SP4 hotfix. The hotfix claims to fix a problem with corrupt event log files when the log is full and wraps.

http://support.microsoft.com/default.aspx?scid=kb;en-us;829246
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Find out what Office 365 Transport Rules are, how they work and their limitations managing Office 365 signatures.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now