strange entries in the wbemess.log

G

Guest

Hi
I was scanning the logs on my machine, and fond this log. I have no clue
what it is, how to kill it, is it necessary? Al I know is that its adding
entries every couple of minutes. I am also getting error in other logs-see
below:
========
wbemess.log
(Mon Feb 21 00:06:06 2005.24293672) : Unable to register event source
'Service Control Manager' on server ''. Error code: 6B5
(Mon Feb 21 00:06:06 2005.24293682) : Event consumer provider is unable to
instantiate event consumer NTEventLogEventConsumer="SCM Event Log Consumer":
error code 0x80041001
(Mon Feb 21 00:06:06 2005.24293692) : Failed the first attempt to retrieve
the sink to deliver an event to event consumer NTEventLogEventConsumer="SCM
Event Log Consumer" with error code 80041001.
WMI will reload and retry.
(Mon Feb 21 00:06:06 2005.24293702) : Failed the second attempt to deliver
an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer"
with error code 80041012.
This event is dropped for this consumer.
(Mon Feb 21 00:06:06 2005.24293712) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293732) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293752) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 07:55:00 2005.71823) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Mon Feb 21 07:55:00 2005.71943) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
================
FrameWork.log :
ERROR CInstance(Win32_Desktop)::SetDWORD(IconHorizontalSpacing) FAILED!
error# 80041002 02/21/2005
00:03:32.852 thread:920 [d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\instance.cpp.2440]
======
wmiprov.log
(Mon Feb 21 07:58:51 2005.303436) : WDM call returned error: 4200


Thank you for the help!
Rene



I posted this in another help forum and got no responses
 
K

Kelly

The Wbemess.log file contains all warning and error messages related to the
WMI event subsystem. Those errors that require administrator attention are
also logged in the Windows NT Event log. Only administrators have read
access to the WMI log folder found at %windir%\system32\wbem\logs.

Under the WMI Control Properties/Logging Tab, uncheck Verbose.

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com


Patti said:
Hi
I was scanning the logs on my machine, and fond this log. I have no clue
what it is, how to kill it, is it necessary? Al I know is that its adding
entries every couple of minutes. I am also getting error in other logs-see
below:
========
wbemess.log
(Mon Feb 21 00:06:06 2005.24293672) : Unable to register event source
'Service Control Manager' on server ''. Error code: 6B5
(Mon Feb 21 00:06:06 2005.24293682) : Event consumer provider is unable to
instantiate event consumer NTEventLogEventConsumer="SCM Event Log
Consumer":
error code 0x80041001
(Mon Feb 21 00:06:06 2005.24293692) : Failed the first attempt to retrieve
the sink to deliver an event to event consumer
NTEventLogEventConsumer="SCM
Event Log Consumer" with error code 80041001.
WMI will reload and retry.
(Mon Feb 21 00:06:06 2005.24293702) : Failed the second attempt to deliver
an event to event consumer NTEventLogEventConsumer="SCM Event Log
Consumer"
with error code 80041012.
This event is dropped for this consumer.
(Mon Feb 21 00:06:06 2005.24293712) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293732) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293752) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 07:55:00 2005.71823) : NT Event Log Consumer: could not
retrieve
sid, 0x80041002
(Mon Feb 21 07:55:00 2005.71943) : NT Event Log Consumer: could not
retrieve
sid, 0x80041002
================
FrameWork.log :
ERROR CInstance(Win32_Desktop)::SetDWORD(IconHorizontalSpacing) FAILED!
error# 80041002 02/21/2005
00:03:32.852 thread:920
[d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\instance.cpp.2440]
======
wmiprov.log
(Mon Feb 21 07:58:51 2005.303436) : WDM call returned error: 4200


Thank you for the help!
Rene



I posted this in another help forum and got no responses
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top