asked on

Event viewer not recording events anymore

The event viewer on my Windows Xp install has stopped recording events. It does record something, such as DCOM errors and some information on services, but very few events get recorded. Windows startup and shutdown are not recorded anymore, system errors aren't either.

I am not using filters by the way, the viewer is setup to show all events.

I have uploaded the logs to my site:

http://www.deathless.it/ApplicationEvents.txt
http://www.deathless.it/ProtectionEvents.txt
http://www.deathless.it/SystemEvents.txt

Does anyone know a way to fix the viewer?

devil_himself

Try This

Start > Run > eventvwr.msc > In The Console Tree >Select the Log Type like":Application" > Go To Action > Properties :---

1.Clear All Your Logs
2.Set your log size to some value of 128MB.
3.Set the log to "Overwrite Events As Needed"

binary_1001010

like what devil said, you might need to clear your log, sometime out of no reason they will get corrupted. if you are concern about auditing, you can save the log first before clearing.

ASKER CERTIFIED SOLUTION

oBdA

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Daniele Brunengo

ASKER

Thanks, it worked perfectly.

binary_1001010

.......

oBdA

binary_1001010,
JFTR: trying to clear a *corrupt* event log from the event viewer accomplishes nothing. The only way to recover from this is to recreate the log files from scratch as described above.