Windows 2000 Event Log Curruption - Windows NT

This is a discussion on Windows 2000 Event Log Curruption - Windows NT ; Recently I noticed that one of Windows 2000 DC's had an event log that showed no entries locally. If I looked at the event log from another computer I saw the number of entried, but could not see the entries ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Windows 2000 Event Log Curruption

  1. Windows 2000 Event Log Curruption

    Recently I noticed that one of Windows 2000 DC's had an event log that
    showed no entries locally. If I looked at the event log from another
    computer I saw the number of entried, but could not see the entries
    themselves.

    Odd -- I've been working with W2k since early betas and I've never
    seen this problem.

    Anyway I thought that it must have been a fluke. I disabled the event
    logging service and rebooted. Deleted the corrupt event logs and
    reenabled the event logging service. Rebooted again and *WALAA*
    everything was at it should be.

    Fastforward a month.

    I am again looking at the event logs on the servers and notice the
    same problem on a different DC.

    Tried researching on MSKB and in the newsgroups but haven't had any
    luck on finding anything.

    Anyone have any ideas about why this is happening?

    Thanks for your help,

    Jason

  2. Re: Windows 2000 Event Log Curruption


    "Jason" wrote in message
    news:3ef03284.0311180532.5777886@posting.google.co m...
    > Recently I noticed that one of Windows 2000 DC's had an event log that
    > showed no entries locally. If I looked at the event log from another
    > computer I saw the number of entried, but could not see the entries
    > themselves.
    >
    > Odd -- I've been working with W2k since early betas and I've never
    > seen this problem.
    >
    > Anyway I thought that it must have been a fluke. I disabled the event
    > logging service and rebooted. Deleted the corrupt event logs and
    > reenabled the event logging service. Rebooted again and *WALAA*
    > everything was at it should be.
    >
    > Fastforward a month.
    >
    > I am again looking at the event logs on the servers and notice the
    > same problem on a different DC.
    >
    > Tried researching on MSKB and in the newsgroups but haven't had any
    > luck on finding anything.
    >
    > Anyone have any ideas about why this is happening?
    >
    > Thanks for your help,
    >
    > Jason

    Have you got SP4 on this machine? I ask because there is a bug in the
    eventvwr.dll which prevents the eventlog entries from displaying correctly.
    It emerged on our machines after we deployed this SP. Don't think there is
    a fix yet but if you have a look at the microsoft newsgroups there are a few
    suggestions there on how to correct the problem.

    HTH,
    Steve



+ Reply to Thread