Solved

Can I suppress a specific Event Log ID or message type?  Win2kServer

Posted on 2007-03-20
9
1,131 Views
Last Modified: 2008-01-09
I have a server that is being innundated with type 1010 events.  they are filling up the log every second.  I am not interested in resolving that issue at the moment (that's a side discussion).

I would like to suppress the messages so that I can see what other events are hitting the log.

Is there any way to selectively tell the OS to 'skip' logging a particular event?

Windows 2000 server running Exchange 2000.
0
Comment
Question by:artthegeek
  • 5
  • 4
9 Comments
 
LVL 26

Expert Comment

by:lnkevin
ID: 18756234
If the error is from exchange, you can disable exchange log, but if it is from windows you can not disable it. In fact, you would like to fix the problem to stop the error message. If the event is from the terminal service license, you can read the following article to troubleshoot it:

http://technet2.microsoft.com/WindowsServer/en/library/3d6e45bc-96e2-4757-90a5-816bb9b2ff331033.mspx?mfr=true

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757347
No, actually it's a perf error - I've been around the maypole with this one.  I've disabled logging on all elements, even turned off perf service.





Event Type:      Error
Event Source:      Perflib
Event Category:      None
Event ID:      1010
Date:            3/20/2007
Time:            12:01:18 PM
User:            N/A
Computer:      COLMSMAIL01
Description:
The Collect Procedure for the "MSSCNTRS" service in DLL "C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\msscntrs.dll" generated an  exception or returned an invalid status. Performance data returned by  counter DLL will be not be returned in Perf Data Block. Exception or  status code returned is data DWORD 0.
Data:
0000: 0e 00 00 00               ....    
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18757364
The errors show for every service.
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 18758021
I am not sure if you try these steps yet. However, if you didn't, give it a shot:

1. Use Regedt32 to add the EventLogLevel value with a Reg_Dword value of 0 to the following value to the registry:      "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\PerfLib\"
2. Right click My Computer and select Manage.
3. Expand out the list under Services and Applications.
4. Right click the WMI Control, and select Properties.
5. Choose the Logging tab and set the Logging level to Disabled, then click OK to close the WMI Properties.
6. Select Services, right click the Windows Management Instrumentation service, and then restart the service".
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 3

Author Comment

by:artthegeek
ID: 18758183
Unfortunately, no luck.
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18758189
Thank you
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 18758463
Did you try to disable performance counter? Try the following procedure:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/94214.mspx?mfr=true

K
0
 
LVL 26

Accepted Solution

by:
lnkevin earned 500 total points
ID: 18758543
The procedure that I gave you earlier is for disable loggin service for perflib. Make sure you follow step one create a registry key named EventLogLevel and set value to 0. Value 0 = no loggin this service. If you are sure to create this registry value, you can try to restart your server (once it's allowed) and let me know if it still loggin the error.

K
0
 
LVL 3

Author Comment

by:artthegeek
ID: 18970946
Thank you very much.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

A few months ago I had an issue with LaserJet 1020 printer which was installed to XP and Windows 7.  It was installed to XP and working, but when I tried to connect from a Windows 7 PC, it would attempt connection and then fail.  Sometimes the Spool…
This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now