Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1858
  • Last Modified:

Event viewer not recording events anymore

The event viewer on my Windows Xp install has stopped recording events. It does record something, such as DCOM errors and some information on services, but very few events get recorded. Windows startup and shutdown are not recorded anymore, system errors aren't either.

I am not using filters by the way, the viewer is setup to show all events.

I have uploaded the logs to my site:

http://www.deathless.it/ApplicationEvents.txt
http://www.deathless.it/ProtectionEvents.txt
http://www.deathless.it/SystemEvents.txt

Does anyone know a way to fix the viewer?
0
Daniele Brunengo
Asked:
Daniele Brunengo
1 Solution
 
devil_himselfCommented:
Try This

Start > Run > eventvwr.msc > In The Console Tree >Select the Log Type like":Application" > Go To Action > Properties  :---

1.Clear All Your Logs
2.Set your log size to some value of 128MB.
3.Set the log to "Overwrite Events As Needed"
0
 
binary_1001010Commented:
like what devil said, you might need to clear your log, sometime out of no reason they will get corrupted. if you are concern about auditing, you can save the log first before clearing.
0
 
oBdACommented:
Could be that the event logs are corrupt.
Set the startup type of the Event Log Service to "Disabled", reboot.
Rename all .evt files in %Systemroot%\system32\config.
Set the startup type of the Event Log Service back to "Automatic", reboot.
Check the event logs.

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/?kbid=172156
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
Thanks, it worked perfectly.
0
 
binary_1001010Commented:
.......
0
 
oBdACommented:
binary_1001010,
JFTR: trying to clear a *corrupt* event log from the event viewer accomplishes nothing. The only way to recover from this is to recreate the log files from scratch as described above.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now