We help IT Professionals succeed at work.

Event ID 3007 - Error opening event log files State.Log & Parameters.Log  - Windows 2019 Server

btm02sf
btm02sf used Ask the Experts™
on
On a new Windows 2019 Server (Dell PowerEdge T340), single domain controller, that I am configuring for a new office, I keep getting two entries in the Administrative Events area of EventViewer, both of them EventID 3007 - EvntAgnt. The two entries state an error when opening a log file as follows below and in the attached screenshot:

Error opening event log file Parameters. Log will not be processed. Return code from OpenEventLog is 87.
Error opening event log file State. Log will not be processed. Return code from OpenEventLog is 87.

I have spent a good chunk of time researching these errors, trying to figure out what is trying to access these logs, and what is it precluding that action from completing. I was not able to find any useful links on the Internet. I searched Drive C for both Parameters.log and State.log and I was not able to find any file anywhere with this names.

So, I am puzzled about the source of these event viewer entries. Any feedback would be much appreciated.

Thank you for your assistance.
EvID_3007_EvntAgnt_ParametersLog.jpg
EvID_3007_EvntAgnt_StateLog.jpg
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Data recovery engineer
Commented:
Disable SNMP Service. Just go to services.msc, find SNMP Service, then stop it, and finally disable it.

Author

Commented:
Hi Dimitris. Indeed it was SNMP that was triggering those events. I disabled it, rebooted, and events didn't appear anymore. Unfortunately, I had to enable SNMP back, as Dell iDRAC is using SNMP. Now that I know why the events appear, I am OK, and won't worry about them in the future. Thank you for your assistance