Event Viewer Filling up

[Phil W]

Hi,

For no apparent reason our servers are starting to fill up
the App logs with Norton Anti-Virus info. One server is
particularly fond of restarting if the log gets filled so
I want to stop this.

They're on Win2000 with SP2 and have Corporate AntiVirus.

I can't make up my mind if it's the servers themselves
running multiple scans, or the clients running multiple
scans (daily) and adding these entries.

Each client and server are scheduled to run one weekly
scan but some client PC's appear to be running more than
one per day, but no extra scans are scheduled.

1) Can I disable these entries to the app logs and how (as
this at least stops that problem)? Example entries below

"Norton AntiVirus services startup was successful.
02/01/2004 16:07:51 Norton AntiVirus
Information None 23 N/A "

"Norton AntiVirus Realtime Protection Loaded.
02/01/2004 16:07:51 Norton AntiVirus
Information None 14 N/A "

2) What is causing these entries and what can I do?

3) Should I be concerned about these entries, other than
the problem they're causing?

Regards.

 

[Dave Patrick]

Ask them at the symantec support site.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

:
| Hi,
|
| For no apparent reason our servers are starting to fill up
| the App logs with Norton Anti-Virus info. One server is
| particularly fond of restarting if the log gets filled so
| I want to stop this.
|
| They're on Win2000 with SP2 and have Corporate AntiVirus.
|
| I can't make up my mind if it's the servers themselves
| running multiple scans, or the clients running multiple
| scans (daily) and adding these entries.
|
| Each client and server are scheduled to run one weekly
| scan but some client PC's appear to be running more than
| one per day, but no extra scans are scheduled.
|
| 1) Can I disable these entries to the app logs and how (as
| this at least stops that problem)? Example entries below
|
| "Norton AntiVirus services startup was successful.
| 02/01/2004 16:07:51 Norton AntiVirus
| Information None 23 N/A "
|
| "Norton AntiVirus Realtime Protection Loaded.
| 02/01/2004 16:07:51 Norton AntiVirus
| Information None 14 N/A "
|
| 2) What is causing these entries and what can I do?
|
| 3) Should I be concerned about these entries, other than
| the problem they're causing?
|
| Regards.

 

[Guest]

I did - the response was this is a microsoft problem (re
the log filling up), hence my posting.

It wasn't the most helpful response ever

 

[Dave Patrick]

How can it be an operating system problem if the logs are Norton Anti-Virus
info? Typical of any interactions I've had with symantec support. You buy
their products and it appears you're on your own.

Clients can't write to the server logs. You might try changing the file
properties to "Overwrite as needed"

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

| I did - the response was this is a microsoft problem (re
| the log filling up), hence my posting.
|
| It wasn't the most helpful response ever

 

[Bill]

I always increase the size of the log file as well, so as not to overwrite
any current logs.

 

[dcdon]

Why do you need to keep all of your Event Viewer log files?
If you are running well and you have a small problem, you
fix it and delete the Event logs.
It becomes ominous to keep a very large file.
When I first started, seems like I remember in NT having
such a large file Executive software wasn't even able to
defrag it.
Someone give me a good reason to keep a very large Event
Viewer Log file.
--

good computing,
don
---------




I always increase the size of the log file as well, so as
not to overwrite
any current logs.

 

[Bill]

1. Don't have time to look at Event Logs every day on hundreds of systems,
and really don't care to, unless someone alerts me to a problem.

2. On a production system, it helps sometime to look back at the event log
for abnormalities re-occurring over a period of time, or to see if a
particular problem coorrellates to some event, in which case it is easier to
pinpoint if you have multiple instances of the same occurrance. These are
usually events written from a VB client application.

3. It sounds like you don't have enough free space if you can't defrag with
Diskeeper.

Why do you need to keep all of your Event Viewer log files?
If you are running well and you have a small problem, you
fix it and delete the Event logs.
It becomes ominous to keep a very large file.
When I first started, seems like I remember in NT having
such a large file Executive software wasn't even able to
defrag it.
Someone give me a good reason to keep a very large Event
Viewer Log file.
--

good computing,
don
---------




I always increase the size of the log file as well, so as
not to overwrite
any current logs.

How can it be an operating system problem if the logs are Norton
Anti-Virus
info? Typical of any interactions I've had with symantec support. You buy
their products and it appears you're on your own.

Clients can't write to the server logs. You might try changing the file
properties to "Overwrite as needed"

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
http://www.microsoft.com/protect.

| I did - the response was this is a microsoft problem (re
| the log filling up), hence my posting.
|
| It wasn't the most helpful response ever