Solved

Can I suppress a specific Event Log ID or message type?  Win2kServer

Posted on 2007-03-20
9
1,138 Views
Last Modified: 2008-01-09
I have a server that is being innundated with type 1010 events.  they are filling up the log every second.  I am not interested in resolving that issue at the moment (that's a side discussion).

I would like to suppress the messages so that I can see what other events are hitting the log.

Is there any way to selectively tell the OS to 'skip' logging a particular event?

Windows 2000 server running Exchange 2000.
0
Comment
Question by:artthegeek
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 26

Expert Comment

by:lnkevin
ID: 18756234
If the error is from exchange, you can disable exchange log, but if it is from windows you can not disable it. In fact, you would like to fix the problem to stop the error message. If the event is from the terminal service license, you can read the following article to troubleshoot it:

http://technet2.microsoft.com/WindowsServer/en/library/3d6e45bc-96e2-4757-90a5-816bb9b2ff331033.mspx?mfr=true

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757347
No, actually it's a perf error - I've been around the maypole with this one.  I've disabled logging on all elements, even turned off perf service.





Event Type:      Error
Event Source:      Perflib
Event Category:      None
Event ID:      1010
Date:            3/20/2007
Time:            12:01:18 PM
User:            N/A
Computer:      COLMSMAIL01
Description:
The Collect Procedure for the "MSSCNTRS" service in DLL "C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\msscntrs.dll" generated an  exception or returned an invalid status. Performance data returned by  counter DLL will be not be returned in Perf Data Block. Exception or  status code returned is data DWORD 0.
Data:
0000: 0e 00 00 00               ....    
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757364
The errors show for every service.
0
Why Off-Site Backups Are The Only Way To Go

You are probably backing up your data—but how and where? Ransomware is on the rise and there are variants that specifically target backups. Read on to discover why off-site is the way to go.

 
LVL 26

Expert Comment

by:lnkevin
ID: 18758021
I am not sure if you try these steps yet. However, if you didn't, give it a shot:

1. Use Regedt32 to add the EventLogLevel value with a Reg_Dword value of 0 to the following value to the registry:      "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\PerfLib\"
2. Right click My Computer and select Manage.
3. Expand out the list under Services and Applications.
4. Right click the WMI Control, and select Properties.
5. Choose the Logging tab and set the Logging level to Disabled, then click OK to close the WMI Properties.
6. Select Services, right click the Windows Management Instrumentation service, and then restart the service".
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758183
Unfortunately, no luck.
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758189
Thank you
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 18758463
Did you try to disable performance counter? Try the following procedure:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/94214.mspx?mfr=true

K
0
 
LVL 26

Accepted Solution

by:
lnkevin earned 500 total points
ID: 18758543
The procedure that I gave you earlier is for disable loggin service for perflib. Make sure you follow step one create a registry key named EventLogLevel and set value to 0. Value 0 = no loggin this service. If you are sure to create this registry value, you can try to restart your server (once it's allowed) and let me know if it still loggin the error.

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18970946
Thank you very much.
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question