Event logs are empty

[Russ Sparks]

In W2k Server(SP4) none of the event logs are showing up.
I receive no warnings and the server seems to be running
fine. I remotely accessed the logs thinking that it may be
the local event viewer but it didn't work. Obviously it's
that much more difficult to diagnose since I can't see the
event logs in the first place! Looking at the .evt files
under system32/config, the time date stamp would indicate
that they're not being updated even though I know events
are happening. The service is running. Has anyone seen any
similar problems?

 

[Dave Patrick]

The temporary fix;
You might try changing the file properties to "Overwrite as needed"

Else; Control Panel|Administrative Tools|Services|Event Log Service|General,
set the "Startup Type:" to "Disabled" restart the pc, then delete (or move)
the corrupt *.evt file(s) from %windir%\system32\config then set the Event
Log Service "Startup Type:" back to "Automatic", restart for effect.

The more permanent fix;
http://support.microsoft.com/default.aspx?scid=kb;en-us;829246&Product=win2000

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

:
| In W2k Server(SP4) none of the event logs are showing up.
| I receive no warnings and the server seems to be running
| fine. I remotely accessed the logs thinking that it may be
| the local event viewer but it didn't work. Obviously it's
| that much more difficult to diagnose since I can't see the
| event logs in the first place! Looking at the .evt files
| under system32/config, the time date stamp would indicate
| that they're not being updated even though I know events
| are happening. The service is running. Has anyone seen any
| similar problems?

 

[Guest]

I've done the removal of the corrupted files and the
overwrite as needed. Strange thing is that I actually saw
an entry show up in the system log briefly and then
disappear. It's very strange. This started happening last
night, it's been working fine since before then.

 

[Dave Patrick]

You'll want to give them a call for the hotfix.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

| I've done the removal of the corrupted files and the
| overwrite as needed. Strange thing is that I actually saw
| an entry show up in the system log briefly and then
| disappear. It's very strange. This started happening last
| night, it's been working fine since before then.

 

[Guest]

Fixed. I simply reinstalled SP4 and now the logs are
working. Very strange. With SP4 having been previously
installed is there a log I can look at to see what files
got replaced during this latest SP4 install this morning
so I can have a clue what might have been the problem?
Thanks

 

[Dave Patrick]

I doubt that it is fixed. Since the problem was apparently caused by service
pack four.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

| Fixed. I simply reinstalled SP4 and now the logs are
| working. Very strange. With SP4 having been previously
| installed is there a log I can look at to see what files
| got replaced during this latest SP4 install this morning
| so I can have a clue what might have been the problem?
| Thanks

 

[Guest]

This machine has been running SP4 since it was released
and the problem just appeared last night. After
reinstalling SP4 it is working now. I'm at a loss

 

[Dave Patrick]

Sounds like you must have missed the article.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

| This machine has been running SP4 since it was released
| and the problem just appeared last night. After
| reinstalling SP4 it is working now. I'm at a loss