?
Solved

Event Viewer is empty

Posted on 2005-03-09
4
Medium Priority
?
287 Views
Last Modified: 2010-04-14
One of our servers is running Windows 2000 server with SP4. If I open Event Viewer, click Application or System, there is not information on the left panel. It is empty. These are what I did.

1.      If I press F5 in System to refresh, the System Events display. However, that doesn’t work in Application Event.
2.      The AppEvent.evt is located in c:\winnt\system32\config. The size is 1023KB and the date is 7/28/2004.
3.      If I go to the properties of the Application event>Filter, all event type are checked. The problem is the both From and To are current date and time, for example 3/9/2005, 3.20.03 PM. They are gray out and can’t be changed. However, If I switch From/To to Event On, I may be able to change the date and time. But that doesn’t any changes. Just not information display.
4.      If I try to Restore Default, The Filter will come back and both From and To are the same date and time.

Any suggestions?
0
Comment
Question by:blin2000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 6

Accepted Solution

by:
vtsinc earned 1000 total points
ID: 13503340
Reference to EE user ObDa:

That's probably due to a corrupt event log. To get your event log running again, do the following:
Set the event log service startup type to "Disabled", reboot.
Move the corrupt .evt file(s) from %SystemRoot%\System32\Config to a different location (or delete it/them).
Set the startup type of the event log service back to "Automatic", reboot. Windows will create new event log file(s) and start logging again.

Event Logs Are Corrupted
http://support.microsoft.com/?kbid=829246

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/?kbid=172156
0
 
LVL 7

Author Comment

by:blin2000
ID: 13511460
Hello,

thank you for the help. I did find the first link http://support.microsoft.com/?kbid=829246 and had MS send me the hotfix. But I haven't try it because I thought I might have another option. I will try to delete corrupt event viewer log first and will post back.
0
 
LVL 7

Author Comment

by:blin2000
ID: 13514047
it works. thank you.
0
 
LVL 6

Expert Comment

by:vtsinc
ID: 13514174
Glad I could help...
Mike
0

Featured Post

Want to be a Web Developer? Get Certified Today!

Enroll in the Certified Web Development Professional course package to learn HTML, Javascript, and PHP. Build a solid foundation to work toward your dream job!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
If you're a modern-day technology professional, you may be wondering if certifications are really necessary. They are. Here's why.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
Suggested Courses
Course of the Month8 days, 20 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question