RE: Event log file is corrupt

Dear Barry:
Thank you for posting here.

>From the post, I understand that the problem to be: When you try to open
Event Viewer, the following error message pops up:
"The Event Log file is corrupted".

Based on my research, I'd like to provide the following suggestions for
your reference:

Suggestion 1:

Please follow the steps below to modify the log files.

1. Stop Event Log service.
2. Open C:\WINDOWS\system32\config.
3. Rename *.evt to *.old. (for example, rename SysEvent.evt to AppEvent.old)
4. Create an empty text file with name AppEvent.txt. Then rename it to
AppEvent.evt.
5. Follow step 4 to create other *.evt files.
6. Start Event Log service again.
7. Test whether the problem persists.

Suggestion 2:

If the problem persists after we perform the above steps, please call PSS
to apply the following Hotfix:

You receive a "The event log file is corrupt" error on a computer that is
running Windows Server 2003 SP1, an x64-based version of Windows Server
2003, or Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899416

After applying the Hotfix, please let me know whether the problem persists.

Meanwhile, please disable the anti-virus software on the SBS Server to
avoid any confliction.

Hope the above info helps. Please feel free to let me know if you have any
questions or concerns.

Have a nice day! :)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Barry McConomy" <smile@xxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Event log file is corrupt
| Date: Wed, 30 Nov 2005 18:21:21 -0500
| Organization: Posted via Supernews, http://www.supernews.com
| Message-ID: <11oscteflul9918@xxxxxxxxxxxxxxxxxx>
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-Complaints-To: abuse@xxxxxxxxxxxxx
| Lines: 19
| Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!newsfe
ed01.sul.t-online.de!t-online.de!news-in.ntli.net!newsrout1-win.ntli.net!ntl
i.net!sn-xit-02!sn-xit-06!sn-post-01!supernews.com!corp.supernews.com!not-fo
r-mail
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:226808
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi
|
| SBS 2003 Premium (SP1)
|
| Event Viewer
|
| I am having problems trying to read the System log
|
| The error is" The event log file is corrupt"
|
| I have followed the procedure (twice) for deleting the log file and still
| get the problem.
|
| Any help/advise would be appreciated.
|
| Regards
| Barry
|
|
|

.

Relevant Pages

  • Re: System Event Log Corrupt
    ... You receive a "The event log file is corrupt" error on a computer that is ... I suggest you contact Microsoft Product Support Services to obtain the ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Failure Audit 537 in Event Log
    ... You get the event 537 in SBS event log. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | Logon Failure: ...
    (microsoft.public.windows.server.sbs)
  • Re: Weird 529 Errors in Security Log
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | event log tomorrow and see whether this was the issue. ... |> resolve this issue: ...
    (microsoft.public.windows.server.sbs)
  • Re: mydocuments missing after logff logon sbs2003 win xp
    ... you doubt this issue relate to the latest patch of Raiser's edge program, ... click to check the "Hide All Microsoft Services" ... This newsgroup only focuses on SBS technical issues. ... | I was also curious as to why the event log audit entries show my document ...
    (microsoft.public.windows.server.sbs)
  • Re: Auto Refresh of Network Drives on SBS 2003
    ... Microsoft is providing this information as aconvenience to you. ... And then save application event log and system event log as evt files on ... This newsgroup only focuses on SBS technical issues. ... Please perform a clean boot, ...
    (microsoft.public.windows.server.sbs)