Windows 2000 Event Log Curruption - Windows NT
This is a discussion on Windows 2000 Event Log Curruption - Windows NT ; Recently I noticed that one of Windows 2000 DC's had an event log that
showed no entries locally. If I looked at the event log from another
computer I saw the number of entried, but could not see the entries
...
-
Windows 2000 Event Log Curruption
Recently I noticed that one of Windows 2000 DC's had an event log that
showed no entries locally. If I looked at the event log from another
computer I saw the number of entried, but could not see the entries
themselves.
Odd -- I've been working with W2k since early betas and I've never
seen this problem.
Anyway I thought that it must have been a fluke. I disabled the event
logging service and rebooted. Deleted the corrupt event logs and
reenabled the event logging service. Rebooted again and *WALAA*
everything was at it should be.
Fastforward a month.
I am again looking at the event logs on the servers and notice the
same problem on a different DC.
Tried researching on MSKB and in the newsgroups but haven't had any
luck on finding anything.
Anyone have any ideas about why this is happening?
Thanks for your help,
Jason
-
Re: Windows 2000 Event Log Curruption
"Jason" wrote in message
news:3ef03284.0311180532.5777886@posting.google.co m...
> Recently I noticed that one of Windows 2000 DC's had an event log that
> showed no entries locally. If I looked at the event log from another
> computer I saw the number of entried, but could not see the entries
> themselves.
>
> Odd -- I've been working with W2k since early betas and I've never
> seen this problem.
>
> Anyway I thought that it must have been a fluke. I disabled the event
> logging service and rebooted. Deleted the corrupt event logs and
> reenabled the event logging service. Rebooted again and *WALAA*
> everything was at it should be.
>
> Fastforward a month.
>
> I am again looking at the event logs on the servers and notice the
> same problem on a different DC.
>
> Tried researching on MSKB and in the newsgroups but haven't had any
> luck on finding anything.
>
> Anyone have any ideas about why this is happening?
>
> Thanks for your help,
>
> Jason
Have you got SP4 on this machine? I ask because there is a bug in the
eventvwr.dll which prevents the eventlog entries from displaying correctly.
It emerged on our machines after we deployed this SP. Don't think there is
a fix yet but if you have a look at the microsoft newsgroups there are a few
suggestions there on how to correct the problem.
HTH,
Steve