Solved

Can I suppress a specific Event Log ID or message type?  Win2kServer

Posted on 2007-03-20
9
1,136 Views
Last Modified: 2008-01-09
I have a server that is being innundated with type 1010 events.  they are filling up the log every second.  I am not interested in resolving that issue at the moment (that's a side discussion).

I would like to suppress the messages so that I can see what other events are hitting the log.

Is there any way to selectively tell the OS to 'skip' logging a particular event?

Windows 2000 server running Exchange 2000.
0
Comment
Question by:artthegeek
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 26

Expert Comment

by:lnkevin
ID: 18756234
If the error is from exchange, you can disable exchange log, but if it is from windows you can not disable it. In fact, you would like to fix the problem to stop the error message. If the event is from the terminal service license, you can read the following article to troubleshoot it:

http://technet2.microsoft.com/WindowsServer/en/library/3d6e45bc-96e2-4757-90a5-816bb9b2ff331033.mspx?mfr=true

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757347
No, actually it's a perf error - I've been around the maypole with this one.  I've disabled logging on all elements, even turned off perf service.





Event Type:      Error
Event Source:      Perflib
Event Category:      None
Event ID:      1010
Date:            3/20/2007
Time:            12:01:18 PM
User:            N/A
Computer:      COLMSMAIL01
Description:
The Collect Procedure for the "MSSCNTRS" service in DLL "C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\msscntrs.dll" generated an  exception or returned an invalid status. Performance data returned by  counter DLL will be not be returned in Perf Data Block. Exception or  status code returned is data DWORD 0.
Data:
0000: 0e 00 00 00               ....    
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757364
The errors show for every service.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 26

Expert Comment

by:lnkevin
ID: 18758021
I am not sure if you try these steps yet. However, if you didn't, give it a shot:

1. Use Regedt32 to add the EventLogLevel value with a Reg_Dword value of 0 to the following value to the registry:      "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\PerfLib\"
2. Right click My Computer and select Manage.
3. Expand out the list under Services and Applications.
4. Right click the WMI Control, and select Properties.
5. Choose the Logging tab and set the Logging level to Disabled, then click OK to close the WMI Properties.
6. Select Services, right click the Windows Management Instrumentation service, and then restart the service".
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758183
Unfortunately, no luck.
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758189
Thank you
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 18758463
Did you try to disable performance counter? Try the following procedure:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/94214.mspx?mfr=true

K
0
 
LVL 26

Accepted Solution

by:
lnkevin earned 500 total points
ID: 18758543
The procedure that I gave you earlier is for disable loggin service for perflib. Make sure you follow step one create a registry key named EventLogLevel and set value to 0. Value 0 = no loggin this service. If you are sure to create this registry value, you can try to restart your server (once it's allowed) and let me know if it still loggin the error.

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18970946
Thank you very much.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question