"Event Log" missing in Services

J

Jimmy

Hello,

My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

=========================================================

Anonymous 05-31-2005 at 06:01:03 PM

Archived from groups: microsoft.public.windowsxp.perform_maintain


The normal Event Log service is missing.


In other words when I look at Services there is no Event Log
service

I discovered this when I went to view the event log.

The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System

Does anyone know how to fix this?

=========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain


Check for the existence of this key. If not found create a *.reg file
from
another machine and import.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]

==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain


Brilliant - that worked

Exported EventLog Key from laptop
Imported to Broken Machine

Everything works.

Deeply appreciated.

==========================================================

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.

Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy
 
J

Jimmy

Hello,

My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

=========================================================

Anonymous   05-31-2005 at 06:01:03 PM

Archived from groups: microsoft.public.windowsxp.perform_maintain

The normal Event Log service is missing.

In other words when I look at Services there is no Event Log
service

I discovered this when I went to view the event log.

The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System

Does anyone know how to fix this?

=========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Check for the existence of this key. If not found create a *.reg file
from
another machine and import.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]

==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Brilliant - that worked

Exported EventLog Key from laptop
Imported to Broken Machine

Everything works.

Deeply appreciated.

==========================================================

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.

Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy
Click to expand...

I found how to export a registry key online. I am running XP Home
Edition, will any machine with XP Home Edition work as a source for
the EventLog key. Thanks in advance, jimmy
 
N

nass

Jimmy said:
Hello,

My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

=========================================================

Anonymous 05-31-2005 at 06:01:03 PM

Archived from groups: microsoft.public.windowsxp.perform_maintain

The normal Event Log service is missing.

In other words when I look at Services there is no Event Log
service

I discovered this when I went to view the event log.

The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System

Does anyone know how to fix this?

=========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Check for the existence of this key. If not found create a *.reg file
from
another machine and import.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]

==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Brilliant - that worked

Exported EventLog Key from laptop
Imported to Broken Machine

Everything works.

Deeply appreciated.

==========================================================

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.

Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy
Click to expand...

I found how to export a registry key online. I am running XP Home
Edition, will any machine with XP Home Edition work as a source for
the EventLog key. Thanks in advance, jimmy
.
Click to expand...

Hi Jimmy,
Yes, any XP Home or XP pro can be the source for importing the Reg to merge
it to your registry but you need to bear in mind that you will need to
tinker/change the name of the Computer in that reg!
"ComputerName"="Here" please enter the name here"My Computer name"
I copied the Reg entry for you to use but you need to enter your computer
name then save it as Eventlog.reg on your desktop then right click it and
select mereg to merge to your registry.

======== Copy and paste to your Notepad the code below ======
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog]
"Description"="Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be stopped."
"DisplayName"="Event Log"
"ErrorControl"=dword:00000001
"Group"="Event log"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,65,00,78,00,65,00,00,00
"ObjectName"="LocalSystem"
"PlugPlayServiceType"=dword:00000003
"Start"=dword:00000002
"Type"=dword:00000020
"ComputerName"=""

==== End of code =======================

HTH, please let us know your progress
nass
 
J

Jimmy

Jimmy said:
Hello,
My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:
=========================================================
Anonymous   05-31-2005 at 06:01:03 PM
Archived from groups: microsoft.public.windowsxp.perform_maintain
The normal Event Log service is missing.
In other words when I look at Services there is no Event Log
service
I discovered this when I went to view the event log.
The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System
Does anyone know how to fix this?
=========================================================
Archived from groups: microsoft.public.windowsxp.perform_maintain
Check for the existence of this key. If not found create a *.reg file
from
another machine and import.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
--
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
==========================================================
Archived from groups: microsoft.public.windowsxp.perform_maintain
Brilliant - that worked
Exported EventLog Key from laptop
Imported to Broken Machine
Everything works.
Deeply appreciated.
==========================================================
10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.
Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy
Click to expand...
Click to expand...
I found how to export a registry key online. I am running XP Home
Edition, will any machine with XP Home Edition work as a source for
the EventLog key. Thanks in advance, jimmy
.
Click to expand...

Hi Jimmy,
Yes, any XP Home or XP pro can be the source for importing the Reg to merge
it to your registry but you need to bear in mind that you will need to
tinker/change the name of the Computer in that reg!
"ComputerName"="Here"  please enter  the name here"My Computer name"
I copied the Reg entry for you to use but you need to enter your computer
name then save it as Eventlog.reg on your desktop then right click it and
select mereg to merge to your registry.

======== Copy and paste to your Notepad the code below ======
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog]
"Description"="Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be stopped."
"DisplayName"="Event Log"
"ErrorControl"=dword:00000001
"Group"="Event log"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f­,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,­\
  00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,65,00,78,00,65,00,00,00
"ObjectName"="LocalSystem"
"PlugPlayServiceType"=dword:00000003
"Start"=dword:00000002
"Type"=dword:00000020
"ComputerName"=""

==== End of code =======================

HTH, please let us know your progress
nass
---http://www.nasstec.co.uk- Hide quoted text -

- Show quoted text -
Click to expand...

Hi nass,

I inserted my computer name and merged the file into the registry.
Rebooted, went to Services. EVENTLOG was there and i got an error upon
trying to start.COULD NOT START THE EVENT LOG SERVICE ON LOCAL
COMPUTER: ERROR 3: THE SYSTEM CANNOT FIND THE PATH SPECIFIED. Double
clicked Event Log entry and the PATH TO EXECUTABLE field was blank.
Selecting EVENTLOG in REGEDIT, there was no ImagePath in the data
field. I created an ImagePath and inserted "%SystemRoot%
\System32\svchost.exe -k LocalServiceNetworkRestricted" (got that path
from another posting). Still would not start, this time ERROR 2: THE
SYSTEM CANNOT FIND THE FILE SPECIFIED. I then changed the ImagePath to
"%SystemRoot%\System32\svchost.exe -k netsvcs" and rebooted with the
same results as the first ImagePath, ERROR 2. Checked System32
directory, svchost.exe is there. Any ideas? Thanks for the help thus
far, jimmy
 
J

Jimmy

Event Log Service (REG file):http://windowsxp.mvps.org/eventlog.htm

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Desktop Experience]
---------------------------------------------------------------------------­---
Supporting Windows® 7, Vista & XPhttp://www.winhelponline.com
---------------------------------------------------------------------------­---




Hello,
Click to expand...
My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

Anonymous   05-31-2005 at 06:01:03 PM
Click to expand...
Archived from groups: microsoft.public.windowsxp.perform_maintain
Click to expand...
The normal Event Log service is missing.
Click to expand...
In other words when I look at Services there is no Event Log
service
Click to expand...
I discovered this when I went to view the event log.
Click to expand...
The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System
Click to expand...
Does anyone know how to fix this?

Archived from groups: microsoft.public.windowsxp.perform_maintain
Click to expand...
Check for the existence of this key. If not found create a *.reg file
from
another machine and import.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
Click to expand...

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
==========================================================
Click to expand...

Archived from groups: microsoft.public.windowsxp.perform_maintain
Click to expand...
Brilliant - that worked
Click to expand...
Exported EventLog Key from laptop
Imported to Broken Machine
Click to expand...
Everything works.
Click to expand...
Deeply appreciated.

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.
Click to expand...
Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy- Hide quoted text -
Click to expand...

- Show quoted text -
Click to expand...

Hi again nass -

Got everything back, Event Viewer,Sercurity Center,Firewall, worked
like a charm, just like the other guy with this problem, it cleared my
Security Center & Firewall panels which were also not starting. I
found two hypens "-" in the ImagePath data that aren't in your copy,
don't ask me how they got there, i have no clue. So i restored to a
good checkpoint and imported the file, rebooted, presto, everything
works, thanks so much for the help. Thanks for the help also Ramesh,
appreciated. I am so happy, i think i will dance a bit, goodnite all,
jimmy
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

"Event Log" service missing 7
Move Event Log 5
Re: Application, Security and System log files - where are they located 2
Remote Event Log 2
How to change location of Vista Event Log file? 3
VSS failing because RegQueryValueExW fails` 2
Q : Error While Writing to CUSTOM EventLog 2
security error when I try to access the event log from my asp.net app. 1

Top