Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [windows-event-log]

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

617 questions
-1
votes
1 answer

Windows 10 pro event log file is corrupted

I'm trying to read event log with LogParser on windows 10 pro, and the query select * from security executed well. But I'm getting a message saying that the file is corrupted After executing the query select count(*) from security. Does anybody like…
Mr.kang
  • 109
  • 5
-1
votes
1 answer

EventViewer Error "local computer may not have the necessary registry"

I am trying to review event viewer logs that was archived from another Server. When accessed, the events are listed properly, but details of each event give the following error: The description for Event ID .... in Source…
Karim Z.
  • 19
  • 1
  • 2
-1
votes
1 answer

Zabbix monitoring event log

i want monitoring event log event id:5002,5004,5007. i have create item: Item when i create trigger is error:Incorrect trigger expression. Check expression part starting from "eventlog[Applications,,,,<5002>,,].last(,86400)}=0". trigger every day…
Tarmo
  • 1
  • 1
  • 3
-1
votes
1 answer

Hard disk failure or about to fail Intel RST software RAID-1 volume event log

If any one of the two Hardisk of Intel rapid Storage Technology(IRST) Software RAID-1 is about to fail or already failed, then what event will write in event viewer log and what is the Event ID for that.
Shashi
  • 1
  • 1
  • 1
-1
votes
1 answer

Create events with specific eventIDs in Windows Server

I work on a tool which will be able to handle events and make actions if specific eventIDs are found in eventlog. For testing I would like to create fake events, which are the same as by system generated events. What is the easiest way to create…
appkovacs
  • 1
  • 1
-1
votes
1 answer

Move Event Log in Windows 2012

Ultimately I'm trying to have security logs written to a remote storage, \\Server-Name\Drive-Letter\File_Name.evtx For testing I'm trying to move the default log path from %SystemRoot%\System32\Winevt\Logs\Security.evtx to C:\Security.evtx . This…
selachka
  • 1
  • 1
  • 4
-1
votes
1 answer

EventLog "Access Denied" after installing an additional DC in a 2012 environment

After promoting a new DC into an existing domain, Eventviewer shows the following: I might as well mention that the Installation itself did not experience any issues When looking at the C:\Windows\System32\winevt\Logs directory I do not see any…
JustAGuy
  • 639
  • 3
  • 23
  • 38
-1
votes
1 answer

Event ID 521 - Critical Logging Failure on Domain Controllers

I'm tasked with the monitoring and analysis of variious logs via our SIEM solution; LogRhythm. I noticed a few weeks back that we had large volumes of this event originating from all of our domain controllers. The log data is as follows: EventID:…
JLPH
  • 71
  • 2
  • 8
-1
votes
1 answer

Track down source of event 4771: Kerberos pre-authentication failed

Some process on a remote server is generating failed log-on attempts for a specific user account. I want to know what process it is. The account in question started generating these bad password attempts (4771, Failure code: 0x18) immediately after…
mwolfe02
  • 193
  • 1
  • 1
  • 12
-1
votes
1 answer

Security Log - Overcrossing Maximum size limit

Please check the below print-screen. I have limit maximum log size at 80 MB, still the log size has gone till 10 GB, Why? do you have any idea, why it is happening and how to limit to 80 MB.
Param
  • 1,357
  • 14
  • 36
  • 52
-1
votes
2 answers

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do they represent milliseconds or something? Please i…
user170899
  • 69
  • 1
  • 2
  • 6
-1
votes
1 answer

Group Policy Event id

DC - Windows Server 2008 R2 Client OS - Window XP Which Event id is generated on Window XP, if my Group policy preference is automatically updated after 90 minutes interval. Sorry, i tried to find out through google, but unable to find exact event…
Param
  • 1,357
  • 14
  • 36
  • 52
-1
votes
2 answers

Lots of Failure Alerts on my DC

I am receiving lots of Failure Audit logs on my DC, can you guide me - how should i identify the culprit. Please see the below print-screen for more detail. The logon type is 3, that means it is a network logon. I have identify the Workstation from…
Param
  • 1,357
  • 14
  • 36
  • 52
-1
votes
1 answer

Windows XP clients strange message in event log

I am getting the following error message in the event log of many of my windows XP clients The COM+ Event System failed to create an instance of the subscriber…
Simon Foster
  • 2,622
  • 6
  • 38
  • 55
-1
votes
1 answer

Monitor Services and Event Logs on Windows Servers

We are standing up a new environment and will be installing SIEM tools, etc. in the future. We have a few dozen Windows 2019 servers so far. I've been tasked with providing a solution for monitoring Windows Services and Event Logs in the near term…
winsysadmin
  • 1
  • 1
1 2 3
…
41
42