Blank Event Viewer

[Guest]

Our company has about 500 servers and this problem has happened on a good
number of them. When going into the Event Viewer, the application log is
blank. You can click on and select where an event should be, but there is
nothing there. If we clear the events, new events are viewable. Or if you
open the Event Viewer and check the system log, there are events listed, but
then checking a blank application log (experiencing the above problem) then
go back to the system log, it, too, is blank. Clearing the logs resets them
fine.
The filters are not activated and we have deleted apparently 'corrupted'
event logs. My question is - Why are they continually corrupting, if that is
the problem?
All event logs are set to Overwrite as needed with a 1Mb limit for
application and system and a 5Mb limit for security.
I am not finding any continued support for this type of problem. People tend
to clear the logs and that is fine. However with the large number of servers
and with the problem happening more than once on any given server, we need to
determine the source of this problem and not have to continually clear log
files.
Thanks!

 

[Dave Patrick]

The temporary fix;
You might try changing the file properties to "Overwrite as needed"

Then; Control Panel|Administrative Tools|Services|Event Log Service|General,
set the "Startup Type:" to "Disabled" restart the pc, then delete (or move)
the corrupt *.evt file(s) from %windir%\system32\config then set the Event
Log Service "Startup Type:" back to "Automatic", restart for effect.

The more permanent fix;
http://support.microsoft.com/default.aspx?scid=kb;en-us;829246&Product=win2000

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Our company has about 500 servers and this problem has happened on a good
| number of them. When going into the Event Viewer, the application log is
| blank. You can click on and select where an event should be, but there is
| nothing there. If we clear the events, new events are viewable. Or if you
| open the Event Viewer and check the system log, there are events listed,
but
| then checking a blank application log (experiencing the above problem)
then
| go back to the system log, it, too, is blank. Clearing the logs resets
them
| fine.
| The filters are not activated and we have deleted apparently 'corrupted'
| event logs. My question is - Why are they continually corrupting, if that
is
| the problem?
| All event logs are set to Overwrite as needed with a 1Mb limit for
| application and system and a 5Mb limit for security.
| I am not finding any continued support for this type of problem. People
tend
| to clear the logs and that is fine. However with the large number of
servers
| and with the problem happening more than once on any given server, we need
to
| determine the source of this problem and not have to continually clear log
| files.
| Thanks!