Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1418
  • Last Modified:

my whole event viewer is empty

hi,
I checked my event viewer this morning and all the logs are empty.  If i open the evt file, there is garbled text in it b/c i am opening it in notepad instead of a evt viewer.  Anyone know how to get my event viewer back?
0
frebay
Asked:
frebay
1 Solution
 
oBdACommented:
Go to Control Panel/Administration/Services, set the Event Log service to "disabled"; reboot.
Go to C:\WINNT\system32\config, move the .evt files to a different location (or delete them); set the Event Log service to "automatic" again; reboot.
0
 
frebayAuthor Commented:
i tired that and it didn't work, any other suggestions?
0
Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

 
frebayAuthor Commented:
start, stop, restart, pause, and resume are all grayed out on the event service.
0
 
oBdACommented:
That's why you have to set the start type to "disabled", then reboot. That will stop the event log service, then you can move/delete the .evt files, because they're not in use anymore. Once you've set the start type back to "automatic" and rebooted again, W2k will create new log files.
0
 
sdow3Commented:
When the same thing happened on my Domain Controller, all I did was right click on each, and 'Clear all Events'. Took care of the issue.
0
 
thewiegerCommented:
Try this MS KnowledgeBase article:

http://support.microsoft.com/default.aspx?scid=kb;[LN];829246
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now