Link to home
Start Free TrialLog in
Avatar of mmurray46
mmurray46

asked on

Event logs are corrupted: kbid=829246

Thanks.

(Win2K Server - SP4, Exchange 2k SP3)

Microsoft offers a hot fix for a known missing event log problem (See: http://support.microsoft.com/?kbid=829246).  The bad thing is they also offer the standard disclaimers since it hasn't been regression tested.  Problem is I need to see logs now since I have issues.  Have you known or heard of any horror stories after applying this patch?  Thanks.

ASKER CERTIFIED SOLUTION
Avatar of Debsyl99
Debsyl99

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Debsyl99
Debsyl99

Sorry - premature click on submit - That should read - "save log file as" and rename and save elsewhere. Then again using event viewer open the saved log file - you'll need to note the type of log file ie system, application etc. If this does work you can then clear the logs, and reset to overwrite as needed etc,

Deb :))
Avatar of oBdA
These are just the standard disclaimers; we've had no problems with that fix. To get your event log running again (independent of the fix), do the following:
In services.msc, set the startup type of the event log service to disabled; reboot.
Move or delete the corrupt .evt files from %Systemroot%\system32\config
Set the startup type of the event log service back to automatic; reboot.

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/?kbid=172156