Empty Application Event Logs

[Help Me]

I have seen quite a few messages in this newgroup about
similiar problems, but have not seen any real solutions.

Issue:
-------------
The Application and System event logs not displaying
entries even upon refresh, however the top of the log
shows xxx entries. Also upon double-clicking on a ghost
event, nothing happens. This is happening sporadically on
many servers throughout our native Win2k AD domain.

Environment:
--------------
Native Win2k Domain (Group Policy active)
Servers are Win2k Srv, Win2k Adv Srv, and Win2k3 Server
All Win2k servers have SP4 and are current on patches
Have Clustered SQL servers that also have this problem

What I've tried:
----------------
Checked Technet (Found not articles specifing this issue)
Performed a reset of logs
Verified Registry settings
Verified security settings


Help Me!
Please respond if you have any suggestions

 

[Charles Otstot]

I have seen quite a few messages in this newgroup about
similiar problems, but have not seen any real solutions.

Issue:
-------------
The Application and System event logs not displaying
entries even upon refresh, however the top of the log
shows xxx entries. Also upon double-clicking on a ghost
event, nothing happens. This is happening sporadically on
many servers throughout our native Win2k AD domain.

<Snip>

Help me, you can delete and recreate the logs following the instructions
found in this KB Article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;172156&Product=win2000
I can't say that this is a permanent fix, but it will enable you to view
logs moving forward, but you won't be able
to retrieve any data from your current logs.

Although the article does not address this issue (I have yet to see anything
from MS even acknowledging the issue),
the reasoning is the same (i.e. the logs appear to be corrupt and treating
them as corrupt allows you to recover).

Charlie