loshdog
asked on
My Event Log Went Missing
Hello and thank you for taking the time out to help me out with this particular issue I'm having. It's my own personal/work PC.
I noticed today that my Symantec Backup Exec System Recovery 10 lost it's connection w/ my NAS where the images are stored.
It says unable to retrieve information form the agent. Access Denied. Found out that there are 2 reasons why this would happen:
1. User does not have admin rights
2. The even log service is stopped.
I go to services and i can't find event log service anywhere.
I click on event viewer in admin toos and this is what i get
I looked all over the internet with hopes of finding a solution. I did stubble upon this forum. This guys had the same issue. But the solution did not work for me.
http://www.sevenforums.com/general-discussion/39118-event-log-service-unavailable.html
I did attempt to recover the pc to a couple of day prior w/o any luck. Event Viewer still missing.
I attempted to re-image my pc b/c two days ago symantec was working just fine. I boot off the rescue cd. Map a new drive to the NAS attempt to load the last image and I get an error
"EC950019 The current recovery data is invalid" I look up the error code on Symantec's site and this is their recommendation.
Exact Error Message
EC950019: The Current Recovery Data is Invalid
Details:
Observation:
When attempting to select the destination drive location during a restore of a recovery point image while within the Symantec Recovery Environment (SRE) gives the following error:
Error EC950019: The current recovery data is invalid
Cause:
There are more then one cause to this error during a recovery attempt and at this time there is no one solution to this issue. Please review the following suggested workarounds and related documents listed below. If the issue persists please contact Symantec Technical Support for further assistance.
Workaround:
- Prepare the disk by clearing off previous file structures using the Microsoft Diskpart utility and reattempt the restore. To learn more about the steps needed to use the Diskpart utility during a restore attempt please review the following technote: http://support.veritas.com/docs/296189
- Disabling the "Verify Recovery Point on Restore" option within the recovery environment and reattempt the restore. To learn more about this or additional restore options available during a restore please review the following technote: http://support.veritas.com/docs/298001
- Using the View | by Filename and browse to each recovery point to be restored then to choose the View | by system to load the system index file (i.e. *.sv2i file) in the Recovery wizard to restore the recovery point; especially if the restore is to different hardware. To learn more about system index file and its use during a restore attempt please review the following technote: http://support.veritas.com/docs/298000
- Take care after selecting the Restore option to go back and reselect the destination drive or modify previous restore options.
Any recommendation would be appreciated. Thank you in advance for your time and input on this matter
~Milosz,
PS. I tried to assign more than 500 points to this question and i was not allowed.. :( sry....
I noticed today that my Symantec Backup Exec System Recovery 10 lost it's connection w/ my NAS where the images are stored.
It says unable to retrieve information form the agent. Access Denied. Found out that there are 2 reasons why this would happen:
1. User does not have admin rights
2. The even log service is stopped.
I go to services and i can't find event log service anywhere.
I click on event viewer in admin toos and this is what i get
I looked all over the internet with hopes of finding a solution. I did stubble upon this forum. This guys had the same issue. But the solution did not work for me.
http://www.sevenforums.com/general-discussion/39118-event-log-service-unavailable.html
I did attempt to recover the pc to a couple of day prior w/o any luck. Event Viewer still missing.
I attempted to re-image my pc b/c two days ago symantec was working just fine. I boot off the rescue cd. Map a new drive to the NAS attempt to load the last image and I get an error
"EC950019 The current recovery data is invalid" I look up the error code on Symantec's site and this is their recommendation.
Exact Error Message
EC950019: The Current Recovery Data is Invalid
Details:
Observation:
When attempting to select the destination drive location during a restore of a recovery point image while within the Symantec Recovery Environment (SRE) gives the following error:
Error EC950019: The current recovery data is invalid
Cause:
There are more then one cause to this error during a recovery attempt and at this time there is no one solution to this issue. Please review the following suggested workarounds and related documents listed below. If the issue persists please contact Symantec Technical Support for further assistance.
Workaround:
- Prepare the disk by clearing off previous file structures using the Microsoft Diskpart utility and reattempt the restore. To learn more about the steps needed to use the Diskpart utility during a restore attempt please review the following technote: http://support.veritas.com/docs/296189
- Disabling the "Verify Recovery Point on Restore" option within the recovery environment and reattempt the restore. To learn more about this or additional restore options available during a restore please review the following technote: http://support.veritas.com/docs/298001
- Using the View | by Filename and browse to each recovery point to be restored then to choose the View | by system to load the system index file (i.e. *.sv2i file) in the Recovery wizard to restore the recovery point; especially if the restore is to different hardware. To learn more about system index file and its use during a restore attempt please review the following technote: http://support.veritas.com/docs/298000
- Take care after selecting the Restore option to go back and reselect the destination drive or modify previous restore options.
Any recommendation would be appreciated. Thank you in advance for your time and input on this matter
~Milosz,
PS. I tried to assign more than 500 points to this question and i was not allowed.. :( sry....
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hello and thank you for your time w/ this issue i'm having. It's the strangest thing..
I follow your recommendation. Windows error reporting service as well as event collector were not running. I started them both, however event log would still not launch...
[embed=image 338793]
I also just noticed that my Antivirus (Avast) is not running. Not sure what to make of this.
[embed=image 338796]
I also attempted to employ the solution here
http://www.winhelponline.com/blog/fix-event-log-service-error-1079/ as you recommended. It did not have any effect.
Untitled-1.jpg
Untitled-6.jpg
I follow your recommendation. Windows error reporting service as well as event collector were not running. I started them both, however event log would still not launch...
[embed=image 338793]
I also just noticed that my Antivirus (Avast) is not running. Not sure what to make of this.
[embed=image 338796]
I also attempted to employ the solution here
http://www.winhelponline.com/blog/fix-event-log-service-error-1079/ as you recommended. It did not have any effect.
Untitled-1.jpg
Untitled-6.jpg
ASKER
ASKER
Updates...
I scanned the pc w/ Malewarebytes and MGtools. No infections found.
I restored the pc to original date. I manually unistalled iTunes and Bonjur Apps.
I installed it yesterday for Iphone. I did see somewhere online this might have been the cause. At this point i'm willing to almost try anything. It did not have an effect, however my Antivirus started to work again...
I used CCleaner to clean the registry after uninstall. Rebooted w/o any changes to event log service...
Please anyone have any ideas? It seems many people are having this issue.
I did start a similar thread on majorgeeks.com still waiting to get my post approved.. GRRRR!!
I will post updates and link to that thread as well...
In meant time if anyone can some additional light on this issue that would be fantastic....
Thank you for your time...
~Milosz,
I scanned the pc w/ Malewarebytes and MGtools. No infections found.
I restored the pc to original date. I manually unistalled iTunes and Bonjur Apps.
I installed it yesterday for Iphone. I did see somewhere online this might have been the cause. At this point i'm willing to almost try anything. It did not have an effect, however my Antivirus started to work again...
I used CCleaner to clean the registry after uninstall. Rebooted w/o any changes to event log service...
Please anyone have any ideas? It seems many people are having this issue.
I did start a similar thread on majorgeeks.com still waiting to get my post approved.. GRRRR!!
I will post updates and link to that thread as well...
In meant time if anyone can some additional light on this issue that would be fantastic....
Thank you for your time...
~Milosz,
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yeah I did think about repair... Other people w/ same issue who repaired their OS from CD did not solve the issue. But i will try and see...
Thx for your input...
Thx for your input...
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Well, it came down to me reinstalling everything.. WHAT A PAIN!
I'm back up to 85% so that's good.
I really appreciate all your comments and pointers.
Thank you all....
PS. I hope MS will issue a fix for this soon. From my understanding they are aware of it.
I'm back up to 85% so that's good.
I really appreciate all your comments and pointers.
Thank you all....
PS. I hope MS will issue a fix for this soon. From my understanding they are aware of it.
ASKER
Forgot to mention. I did do a repair prior to format and it did not work... Thx again.. :)
ASKER
"Please verify by clicking start ORB" The rest i'm good with.
Thanks again..