Event Viewer is issuing Warnings!

[Guest]

When I go to System Tools, Event Viewer, Application there are two warnings,
EvntAgnt 1015 and EvntAgnt 1003.

Event ID 1015
Under Properties, Description it says, "TraceLevel parameter not located in
registry. Default trace level used is 32. "

On the bottom of the warning there is a link to a MS Help message which
says, "To stop displaying EvntAgnt 1015 messages in Event Viewer:
Before starting SNMP, open Registry Editor.
Navigate to the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SNMP_
EVENTS\EventLog\Parameters
Add the following registry values:
TraceFileNameType: REG_SZValue: null (blank)
TraceLevelType: REG_DWORDValue: 32

Here is what I did :
1. Shut off SNMP
2. Found TraceFileNameType: REG_SZValue: null (blank). It was blank
3. Could not find TraceLevelType?
I did find a reference to REG_DWORD. It said, "LastBoot Time Reg_Word Data
0x45db034e"

What should I do remove the cause of the warning, not just the posting to
Viewer.

Event 1013
Same question as Event ID 1005
KC

 

[Wesley Vogel]

Which Event ID 1013?

There are eight pages of Event ID 1013
http://www.microsoft.com/technet/support/ee/SearchResults.aspx?Type=0&Message=1013

Event ID & the Event Source are very important. You need to include the
Event Source.

Same question as 1013.

There are 10 pages for Event ID 1005
http://www.microsoft.com/technet/support/ee/SearchResults.aspx?Type=0&Message=1005

You need to have the Event ID & the Event Source. Microsoft product: --All
Products-- is usually good enough. Be careful when scrolling down in the
page so that Microsoft product: doesn't change on you.

To view Windows XP Events and Errors, type the Source (for example, Print)
and/or the Event code (for example, 20) into the ID field, then click the Go
button. Source and Event codes may be found in the Event Viewer logs.

Events And Errors Message Center: Advanced Search
http://www.microsoft.com/technet/support/ee/ee_advanced.aspx

Events And Errors Message Center: Basic Search
http://www.microsoft.com/technet/support/ee/ee_basic.aspx

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Hi Wesely,

I said ID 1003 not 1013.

Details
Product: Windows Operating System
Event ID: 1003
Source: EvntAgnt
Version: 5.2
Symbolic Name: SNMPELEA_NO_REGISTRY_TRACE_FILE_PARAMETER
Message: TraceFileName parameter not located in registry; Default trace file
used is %1.

Explanation
No debug tracing output file is generated. This is the default condition of
the system. Debug tracing should only be turned on when you are debugging
software.

These error events will continue to be logged when you restart the computer,
unless you reconfigure the Evntagnt.dll.


User Action
No user action is required; however, you can stop Windows from displaying
these messages in Event Viewer by reconfiguring the evntagnt.dll in the
system registry.

Caution The following procedures change system registry settings. If
Registry Editor is used incorrectly, serious system problems can occur, and
the operating system may need to be reinstalled.

To stop displaying EvntAgnt 1015 messages in Event Viewer


Before starting SNMP, open Registry Editor.
Navigate to the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SNMP_
EVENTS\EventLog\Parameters
Add the following registry values:
TraceFileNameType: REG_SZValue: null (blank)
TraceLevelType: REG_DWORDValue: 32

If you want to enable debug tracing of eventagnt.dll on this computer,
reconfigure eventagnt.dll in the system registry. This will also stop Windows
from displaying these messages in Event Viewer.

To configure the evntagnt.dll file for debug tracing


Open Registry Editor.
Navigate to the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SNMP_ EVENTS\EventLog\Parameters
Add the following registry values:
TraceFileNameType: REG_SZValue: c:\evntagnt.log
TraceLevelType: REG_DWORDValue: 1




Version: 5.0
Component: Application Event Log
Symbolic Name: SNMPELEA_NO_REGISTRY_TRACE_FILE_PARAMETER
Message: TraceFileName parameter not located in registry; Default trace file
used is %1.

Explanation
No debug tracing output file is generated. This is the default condition of
the system. Debug tracing should only be turned on when you are debugging
software.

These error events will continue to be logged when you restart the computer,
unless you reconfigure the Evntagnt.dll.


User Action
No user action is required; however, you can stop Windows from displaying
these messages in Event Viewer by reconfiguring the evntagnt.dll in the
system registry.

Caution The following procedures change system registry settings. If
Registry Editor is used incorrectly, serious system problems can occur, and
the operating system may need to be reinstalled.

To stop displaying EvntAgnt 1015 messages in Event Viewer


Before starting SNMP, open Registry Editor.
Navigate to the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SNMP_
EVENTS\EventLog\Parameters
Add the following registry values:
TraceFileNameType: REG_SZValue: null (blank)
TraceLevelType: REG_DWORDValue: 32






--------------------------------------------------------------------------------


Currently there are no Microsoft Knowledge Base articles available for this
specific error or event message. For information about other support options
you can use to find answers online, see
http://support.microsoft.com/default.aspx.






Here is the complete Help file.

 

[Rock]

When I go to System Tools, Event Viewer, Application there are two
warnings,
EvntAgnt 1015 and EvntAgnt 1003.

Event ID 1015
Under Properties, Description it says, "TraceLevel parameter not located
in
registry. Default trace level used is 32. "

On the bottom of the warning there is a link to a MS Help message which
says, "To stop displaying EvntAgnt 1015 messages in Event Viewer:
Before starting SNMP, open Registry Editor.
Navigate to the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SNMP_
EVENTS\EventLog\Parameters
Add the following registry values:
TraceFileNameType: REG_SZValue: null (blank)
TraceLevelType: REG_DWORDValue: 32

Here is what I did :
1. Shut off SNMP
2. Found TraceFileNameType: REG_SZValue: null (blank). It was blank
3. Could not find TraceLevelType?
I did find a reference to REG_DWORD. It said, "LastBoot Time Reg_Word Data
0x45db034e"

What should I do remove the cause of the warning, not just the posting to
Viewer.

Event 1013
Same question as Event ID 1005

http://www.eventid.net/

 

[Wesley Vogel]

From your first post. Maybe it was a typo.

Event 1013
Same question as Event ID 1005
KC

Event ID: 1003
Source: EvntAgnt
http://www.microsoft.com/technet/su...dVer=5.2&EvtID=1003&EvtSrc=EvntAgnt&LCID=1033

Event ID 1003 and Event ID 1015 appear in the application log each time that
you restart Windows Server 2003
http://support.microsoft.com/kb/832790

ID: 1015
Source: EvntAgnt
http://www.microsoft.com/technet/su...dVer=5.2&EvtID=1015&EvtSrc=EvntAgnt&LCID=1033

Event ID: 1003
Source: EvntAgnt
http://www.eventid.net/display.asp?eventid=1003&eventno=2805&source=EvntAgnt&phase=1

ID: 1015
Source: EvntAgnt
http://www.eventid.net/display.asp?eventid=1015&eventno=2612&source=EvntAgnt&phase=1

No need to subsribe, here are the related links....

JSI Tip 7526 is
The Application event log records Event IDs 1003 and 1015 every time you
restart Windows Server 2003
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=7526

M832790 is
Event ID 1003 and Event ID 1015 appear in the application log each time that
you restart Windows Server 2003
http://support.microsoft.com/kb/832790

M889082 is
Event ID: 1003 and Event ID: 1015 are added to the Application log every
time that you restart Windows XP Service Pack 2
http://support.microsoft.com/kb/889082

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In