Solved

Event viewer not recording events anymore

Posted on 2007-11-16
6
1,776 Views
Last Modified: 2010-04-21
The event viewer on my Windows Xp install has stopped recording events. It does record something, such as DCOM errors and some information on services, but very few events get recorded. Windows startup and shutdown are not recorded anymore, system errors aren't either.

I am not using filters by the way, the viewer is setup to show all events.

I have uploaded the logs to my site:

http://www.deathless.it/ApplicationEvents.txt
http://www.deathless.it/ProtectionEvents.txt
http://www.deathless.it/SystemEvents.txt

Does anyone know a way to fix the viewer?
0
Comment
Question by:Daniele Brunengo
6 Comments
 
LVL 8

Expert Comment

by:devil_himself
ID: 20297474
Try This

Start > Run > eventvwr.msc > In The Console Tree >Select the Log Type like":Application" > Go To Action > Properties  :---

1.Clear All Your Logs
2.Set your log size to some value of 128MB.
3.Set the log to "Overwrite Events As Needed"
0
 
LVL 9

Expert Comment

by:binary_1001010
ID: 20297589
like what devil said, you might need to clear your log, sometime out of no reason they will get corrupted. if you are concern about auditing, you can save the log first before clearing.
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 20297594
Could be that the event logs are corrupt.
Set the startup type of the Event Log Service to "Disabled", reboot.
Rename all .evt files in %Systemroot%\system32\config.
Set the startup type of the Event Log Service back to "Automatic", reboot.
Check the event logs.

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/?kbid=172156
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 

Author Closing Comment

by:Daniele Brunengo
ID: 31409532
Thanks, it worked perfectly.
0
 
LVL 9

Expert Comment

by:binary_1001010
ID: 20302873
.......
0
 
LVL 83

Expert Comment

by:oBdA
ID: 20304172
binary_1001010,
JFTR: trying to clear a *corrupt* event log from the event viewer accomplishes nothing. The only way to recover from this is to recreate the log files from scratch as described above.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

937 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

1 Experts available now in Live!

Get 1:1 Help Now