Solved

Can I suppress a specific Event Log ID or message type?  Win2kServer

Posted on 2007-03-20
9
1,134 Views
Last Modified: 2008-01-09
I have a server that is being innundated with type 1010 events.  they are filling up the log every second.  I am not interested in resolving that issue at the moment (that's a side discussion).

I would like to suppress the messages so that I can see what other events are hitting the log.

Is there any way to selectively tell the OS to 'skip' logging a particular event?

Windows 2000 server running Exchange 2000.
0
Comment
Question by:artthegeek
  • 5
  • 4
9 Comments
 
LVL 26

Expert Comment

by:lnkevin
ID: 18756234
If the error is from exchange, you can disable exchange log, but if it is from windows you can not disable it. In fact, you would like to fix the problem to stop the error message. If the event is from the terminal service license, you can read the following article to troubleshoot it:

http://technet2.microsoft.com/WindowsServer/en/library/3d6e45bc-96e2-4757-90a5-816bb9b2ff331033.mspx?mfr=true

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757347
No, actually it's a perf error - I've been around the maypole with this one.  I've disabled logging on all elements, even turned off perf service.





Event Type:      Error
Event Source:      Perflib
Event Category:      None
Event ID:      1010
Date:            3/20/2007
Time:            12:01:18 PM
User:            N/A
Computer:      COLMSMAIL01
Description:
The Collect Procedure for the "MSSCNTRS" service in DLL "C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\msscntrs.dll" generated an  exception or returned an invalid status. Performance data returned by  counter DLL will be not be returned in Perf Data Block. Exception or  status code returned is data DWORD 0.
Data:
0000: 0e 00 00 00               ....    
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757364
The errors show for every service.
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 26

Expert Comment

by:lnkevin
ID: 18758021
I am not sure if you try these steps yet. However, if you didn't, give it a shot:

1. Use Regedt32 to add the EventLogLevel value with a Reg_Dword value of 0 to the following value to the registry:      "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\PerfLib\"
2. Right click My Computer and select Manage.
3. Expand out the list under Services and Applications.
4. Right click the WMI Control, and select Properties.
5. Choose the Logging tab and set the Logging level to Disabled, then click OK to close the WMI Properties.
6. Select Services, right click the Windows Management Instrumentation service, and then restart the service".
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758183
Unfortunately, no luck.
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758189
Thank you
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 18758463
Did you try to disable performance counter? Try the following procedure:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/94214.mspx?mfr=true

K
0
 
LVL 26

Accepted Solution

by:
lnkevin earned 500 total points
ID: 18758543
The procedure that I gave you earlier is for disable loggin service for perflib. Make sure you follow step one create a registry key named EventLogLevel and set value to 0. Value 0 = no loggin this service. If you are sure to create this registry value, you can try to restart your server (once it's allowed) and let me know if it still loggin the error.

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18970946
Thank you very much.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question