?
Solved

Event logs are corrupted: kbid=829246

Posted on 2004-10-12
3
Medium Priority
?
201 Views
Last Modified: 2010-04-13
Thanks.

(Win2K Server - SP4, Exchange 2k SP3)

Microsoft offers a hot fix for a known missing event log problem (See: http://support.microsoft.com/?kbid=829246).  The bad thing is they also offer the standard disclaimers since it hasn't been regression tested.  Problem is I need to see logs now since I have issues.  Have you known or heard of any horror stories after applying this patch?  Thanks.

0
Comment
Question by:mmurray46
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 20

Accepted Solution

by:
Debsyl99 earned 375 total points
ID: 12292113
Hi

I've had this before and this worth a try as it worked for me. Right click the logs that you can't currently view and then save the log files. You may be able to open and view then after you've saved them. The hotfix that you're referencing is referencing enterprise and prodessional editions however.
0
 
LVL 20

Expert Comment

by:Debsyl99
ID: 12292214
Sorry - premature click on submit - That should read - "save log file as" and rename and save elsewhere. Then again using event viewer open the saved log file - you'll need to note the type of log file ie system, application etc. If this does work you can then clear the logs, and reset to overwrite as needed etc,

Deb :))
0
 
LVL 85

Expert Comment

by:oBdA
ID: 12295713
These are just the standard disclaimers; we've had no problems with that fix. To get your event log running again (independent of the fix), do the following:
In services.msc, set the startup type of the event log service to disabled; reboot.
Move or delete the corrupt .evt files from %Systemroot%\system32\config
Set the startup type of the event log service back to automatic; reboot.

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/?kbid=172156
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question