Solved

Event viewer not recording events anymore

Posted on 2007-11-16
6
1,823 Views
Last Modified: 2010-04-21
The event viewer on my Windows Xp install has stopped recording events. It does record something, such as DCOM errors and some information on services, but very few events get recorded. Windows startup and shutdown are not recorded anymore, system errors aren't either.

I am not using filters by the way, the viewer is setup to show all events.

I have uploaded the logs to my site:

http://www.deathless.it/ApplicationEvents.txt
http://www.deathless.it/ProtectionEvents.txt
http://www.deathless.it/SystemEvents.txt

Does anyone know a way to fix the viewer?
0
Comment
Question by:Daniele Brunengo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 8

Expert Comment

by:devil_himself
ID: 20297474
Try This

Start > Run > eventvwr.msc > In The Console Tree >Select the Log Type like":Application" > Go To Action > Properties  :---

1.Clear All Your Logs
2.Set your log size to some value of 128MB.
3.Set the log to "Overwrite Events As Needed"
0
 
LVL 9

Expert Comment

by:binary_1001010
ID: 20297589
like what devil said, you might need to clear your log, sometime out of no reason they will get corrupted. if you are concern about auditing, you can save the log first before clearing.
0
 
LVL 85

Accepted Solution

by:
oBdA earned 500 total points
ID: 20297594
Could be that the event logs are corrupt.
Set the startup type of the Event Log Service to "Disabled", reboot.
Rename all .evt files in %Systemroot%\system32\config.
Set the startup type of the Event Log Service back to "Automatic", reboot.
Check the event logs.

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/?kbid=172156
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Closing Comment

by:Daniele Brunengo
ID: 31409532
Thanks, it worked perfectly.
0
 
LVL 9

Expert Comment

by:binary_1001010
ID: 20302873
.......
0
 
LVL 85

Expert Comment

by:oBdA
ID: 20304172
binary_1001010,
JFTR: trying to clear a *corrupt* event log from the event viewer accomplishes nothing. The only way to recover from this is to recreate the log files from scratch as described above.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question