Re: Event log file is corrupt

Edward

Suggest # 1, failed.
Suggestion # 2, worked.

Many thanks.

Barry

"Edward Tian" <v-edtian@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:iKDggyh9FHA.1236@xxxxxxxxxxxxxxxxxxxxxxxx
> Dear Barry:
> Thank you for posting here.
>
> From the post, I understand that the problem to be: When you try to open
> Event Viewer, the following error message pops up:
> "The Event Log file is corrupted".
>
> Based on my research, I'd like to provide the following suggestions for
> your reference:
>
> Suggestion 1:
>
> Please follow the steps below to modify the log files.
>
> 1. Stop Event Log service.
> 2. Open C:\WINDOWS\system32\config.
> 3. Rename *.evt to *.old. (for example, rename SysEvent.evt to
> AppEvent.old)
> 4. Create an empty text file with name AppEvent.txt. Then rename it to
> AppEvent.evt.
> 5. Follow step 4 to create other *.evt files.
> 6. Start Event Log service again.
> 7. Test whether the problem persists.
>
> Suggestion 2:
>
> If the problem persists after we perform the above steps, please call PSS
> to apply the following Hotfix:
>
> You receive a "The event log file is corrupt" error on a computer that is
> running Windows Server 2003 SP1, an x64-based version of Windows Server
> 2003, or Windows XP Professional x64 Edition
> http://support.microsoft.com/kb/899416
>
> After applying the Hotfix, please let me know whether the problem
> persists.
>
> Meanwhile, please disable the anti-virus software on the SBS Server to
> avoid any confliction.
>
> Hope the above info helps. Please feel free to let me know if you have any
> questions or concerns.
>
> Have a nice day! :)
>
> Best Regards
> Edward Tian(MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
> | From: "Barry McConomy" <smile@xxxxxxxxxx>
> | Newsgroups: microsoft.public.windows.server.sbs
> | Subject: Event log file is corrupt
> | Date: Wed, 30 Nov 2005 18:21:21 -0500
> | Organization: Posted via Supernews, http://www.supernews.com
> | Message-ID: <11oscteflul9918@xxxxxxxxxxxxxxxxxx>
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> | X-RFC2646: Format=Flowed; Original
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> | X-Complaints-To: abuse@xxxxxxxxxxxxx
> | Lines: 19
> | Path:
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!newsfe
> ed01.sul.t-online.de!t-online.de!news-in.ntli.net!newsrout1-win.ntli.net!ntl
> i.net!sn-xit-02!sn-xit-06!sn-post-01!supernews.com!corp.supernews.com!not-fo
> r-mail
> | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:226808
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | Hi
> |
> | SBS 2003 Premium (SP1)
> |
> | Event Viewer
> |
> | I am having problems trying to read the System log
> |
> | The error is" The event log file is corrupt"
> |
> | I have followed the procedure (twice) for deleting the log file and
> still
> | get the problem.
> |
> | Any help/advise would be appreciated.
> |
> | Regards
> | Barry
> |
> |
> |
>


.

Relevant Pages

  • Re: Configured Monitoring with "off-site" email
    ... > send outbound monitoring emails, but you can send normal emails without ... Select W3C Extended Log File Format from the list below. ... please also paste it to newsgroup. ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: System Event Log Corrupt
    ... You receive a "The event log file is corrupt" error on a computer that is ... I suggest you contact Microsoft Product Support Services to obtain the ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Security Log Full
    ... Type the complete path to the new location (including the log file ... click to check the "Hide All Microsoft Services" ... This newsgroup only focuses on SBS technical issues. ... | Thread-Topic: Security Log Full ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA send. reply, forward error
    ... After analyze your log file I find the following error: ... On client computer, please delete the Temporary Internet Files: ... click to check the "Hide All Microsoft Services" ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Failure Audit 537 in Event Log
    ... You get the event 537 in SBS event log. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | Logon Failure: ...
    (microsoft.public.windows.server.sbs)