Re: Application Event Log File is Corrupt



Hello James,

Sorry to keep you waiting!

I have discussed with colleagues, and our conclusion is, you can restore to
alternate location and then pick whichever event log you want to keep and
which ones you don't. However, if the providers are not there, then the
evt file will not contain the descriptions for the errors. For example: an
Exchange server 2003 saves out the application.evt file, open it on a
Windows XP machine and you will not have a whole lot of information.

If you have any further questions or concerns, please feel free to let me
know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
From: "James H-B" <jbroomfield1@xxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Subject: Re: Application Event Log File is Corrupt
Date: 22 Feb 2006 03:34:13 -0800
Organization: http://groups.google.com
Lines: 24
Message-ID: <1140608053.575707.145160@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
References: <1139329547.990605.53520@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<1139919032.441375.264140@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<bqP#RidMGHA.608@xxxxxxxxxxxxxxxxxxxxx>
NNTP-Posting-Host: 217.27.242.165
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1140608059 22494 127.0.0.1 (22 Feb 2006
11:34:19 GMT)
X-Complaints-To: groups-abuse@xxxxxxxxxx
NNTP-Posting-Date: Wed, 22 Feb 2006 11:34:19 +0000 (UTC)
In-Reply-To: <bqP#RidMGHA.608@xxxxxxxxxxxxxxxxxxxxx>
User-Agent: G2/0.2
X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727),gzip(gfe),gzip(gfe)
Complaints-To: groups-abuse@xxxxxxxxxx
Injection-Info: g43g2000cwa.googlegroups.com; posting-host=217.27.242.165;
posting-account=cTEHqA0AAAD_BI_qM_RZQRdWQ4L4K16b
Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!transit3.readnews.com!
news-out.readnews.com!postnews.google.com!g43g2000cwa.googlegroups.com!not-f
or-mail
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:246433
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi there Brandy,

Thanks very much for your continued interest and assistance. At this
stage we are trying to find a system to back up the event logs so that
they can be restored without restoring the entire system. I think that
the best way to do this may be to save the event logs onto a network
share as .evt files so that they are then backed-up as part of the
regular procedure.

In the mean time is there any way to recover the corrupted event log
file. I know that I have sent .pst files from Outlook 2000 which have
corrupted when they reached the 2GB size limit to Microsoft to have
them recovered, would this be possible with a .evt file?

Also would they have been backed up as part of our regular ASR backup?
I know they are stored in the system state in our regular full backup,
I assume that this is the same with the ASR but have learnt the hard
way that assuming such things is a recipe for disaster in this job!

Once again thank you very much for your help.

James H-B
Net Admin



.



Relevant Pages

  • Re: SBS2003 - Cannot restore GPO following Article 888943
    ... Now let me explain the backup clearly, the SBS backup and restore can help ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Restore public folders and companyweb
    ... > where the backup of the database. ... Before you can start to restore the SharePoint Services databases, ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Restore public folders and companyweb
    ... > where the backup of the database. ... Before you can start to restore the SharePoint Services databases, ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy Problems
    ... DNS: SBS INTERNAL NIC IP as the only entry ... Microsoft CSS Online Newsgroup Support ... | restore to pick an earlier restore point as none existed in system ...
    (microsoft.public.windows.server.sbs)
  • Re: NTDS ISAM Database Corruption erors on SBS 2003 Server
    ... you may need to restore the system or do an Offline ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)