Event viewer logs show empty

[Cindy F]

On a Windows 2000 server, the event viewer logs
disappear. They show information in the application log.
When switching to view the system log, then going back to
the application log, the app log is empty.

Anyone know how to resolve this?

 

[Lanwench [MVP - Exchange]]

I saw that happen once on a W2k Pro PC and was never for the life of me able
to figure out why. I exported the "empty" event logs to .evt files, cleared
all logs, and the problem disappeared. On a server I would've been more
nervous about it, but it may be a fix for you....

 

[dcdon]

Hi,

There has been a rash of this happening lately. Suspect it has something to do
with Updates, but not sure. In most cases deleting the files cures the problem.
First the Event log in Services is disabled and a restart, before deleting. I
just did a search for *.evt and the three, sysevent.evt, secevent.evt, and
appevent.evt popped right up and deleted them there, reset the Event log back to
Automatic, rebooted, went ahead and defragged. Good til next time.

Haven't had the opportunity to say, Hi in a while; hope all is good (not just
well), and "HI".

;o)

--
good computing,
don
--------

"Lanwench [MVP - Exchange]"
I saw that happen once on a W2k Pro PC and was never for the life of me able
to figure out why. I exported the "empty" event logs to .evt files, cleared
all logs, and the problem disappeared. On a server I would've been more
nervous about it, but it may be a fix for you....

 

[Curt]

Any luck on figure out why this happens? I am having the
same thing happen to me on a couple of our servers.

Thank you
Curt

 

[Charles Otstot]

Any luck on figure out why this happens? I am having the
same thing happen to me on a couple of our servers.

Thank you
Curt

No word from MS on why this is occurring (or even whether MS recognizes that
it is an issue).
I've seen 20+ threads on this since early September. To date, the only fix
is deleting and recreating the log files (some, including myself, have had
success with simply clearing the logs and exiting the event viewer); no one
has been able to verify whether deletion and recreation is a permanent fix
or a temporary workaround.

Charlie