Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Can I suppress a specific Event Log ID or message type?  Win2kServer

Posted on 2007-03-20
9
Medium Priority
?
1,140 Views
Last Modified: 2008-01-09
I have a server that is being innundated with type 1010 events.  they are filling up the log every second.  I am not interested in resolving that issue at the moment (that's a side discussion).

I would like to suppress the messages so that I can see what other events are hitting the log.

Is there any way to selectively tell the OS to 'skip' logging a particular event?

Windows 2000 server running Exchange 2000.
0
Comment
Question by:artthegeek
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 26

Expert Comment

by:lnkevin
ID: 18756234
If the error is from exchange, you can disable exchange log, but if it is from windows you can not disable it. In fact, you would like to fix the problem to stop the error message. If the event is from the terminal service license, you can read the following article to troubleshoot it:

http://technet2.microsoft.com/WindowsServer/en/library/3d6e45bc-96e2-4757-90a5-816bb9b2ff331033.mspx?mfr=true

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757347
No, actually it's a perf error - I've been around the maypole with this one.  I've disabled logging on all elements, even turned off perf service.





Event Type:      Error
Event Source:      Perflib
Event Category:      None
Event ID:      1010
Date:            3/20/2007
Time:            12:01:18 PM
User:            N/A
Computer:      COLMSMAIL01
Description:
The Collect Procedure for the "MSSCNTRS" service in DLL "C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\msscntrs.dll" generated an  exception or returned an invalid status. Performance data returned by  counter DLL will be not be returned in Perf Data Block. Exception or  status code returned is data DWORD 0.
Data:
0000: 0e 00 00 00               ....    
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757364
The errors show for every service.
0
How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.

 
LVL 26

Expert Comment

by:lnkevin
ID: 18758021
I am not sure if you try these steps yet. However, if you didn't, give it a shot:

1. Use Regedt32 to add the EventLogLevel value with a Reg_Dword value of 0 to the following value to the registry:      "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\PerfLib\"
2. Right click My Computer and select Manage.
3. Expand out the list under Services and Applications.
4. Right click the WMI Control, and select Properties.
5. Choose the Logging tab and set the Logging level to Disabled, then click OK to close the WMI Properties.
6. Select Services, right click the Windows Management Instrumentation service, and then restart the service".
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758183
Unfortunately, no luck.
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758189
Thank you
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 18758463
Did you try to disable performance counter? Try the following procedure:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/94214.mspx?mfr=true

K
0
 
LVL 26

Accepted Solution

by:
lnkevin earned 1500 total points
ID: 18758543
The procedure that I gave you earlier is for disable loggin service for perflib. Make sure you follow step one create a registry key named EventLogLevel and set value to 0. Value 0 = no loggin this service. If you are sure to create this registry value, you can try to restart your server (once it's allowed) and let me know if it still loggin the error.

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18970946
Thank you very much.
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question