Event Viewer

[DL]

Win2k sp4

I'm trying to diagnose an Event err.
Viewer shows 2,854 events
When I attempt to filter, the view window returns 'blank/empty'.
If I scroll down, all events, after about 50 events no more are shown..
Manually scrolling,up and down, has the effect of completely clearing all
events, until I refresh.
If I export to txt only some 25kb of events, (35events) are exported, the
origonal event file is 2854 events and 512kb.

Is there any other useful way of opening the evt, event log?
TY

 

[Guest]

Hi,

You may try the following "workaround": I am quoting from the Event Viewer
Help:

To archive an event log

Open Event Viewer.
In the console tree, click the log you want to archive.
On the Action menu, click Save Log File As.
In File name, enter a name for the archived log file.
In Save as type, click a file format, and then click Save.

Notes

If you archive a log in log-file format, you can reopen it in Event Viewer.
Logs saved as event log files (*.evt) retain the binary data for each event
recorded.
If you archive a log in text or comma-delimited format (*.txt and *.csv,
respectively), you can reopen the log in other programs such as word
processing or spreadsheet programs. Logs saved in text or comma-delimited
format do not retain the binary data.
When you archive a log file, the entire log is saved, regardless of
filtering options.
The sort order is not retained when logs are saved.
Archiving has no effect on the current contents of the active log.

So, I hope you will be able to read all the events from the archived log.
Please read the Event Viewer Help topic "open an archived event log".

 

[Dave Patrick]

The Event log(s) may be corrupt.

You might try changing the file properties to "Overwrite as needed"

Then; Control Panel|Administrative Tools|Services|Event Log Service|General,
set the "Startup Type:" to "Disabled" restart the pc, then delete (or move)
the corrupt *.evt file(s) from %windir%\system32\config then set the Event
Log Service "Startup Type:" back to "Automatic", restart for effect.

The more permanent fix;
http://support.microsoft.com/default.aspx?scid=kb;en-us;829246&Product=win2000

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect