Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [windows-event-log]

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

617 questions
3
votes
0 answers

New Server 2012 R2 Essentials generating Audit Failure Event 4625 Null SID Logon Attempts

I am researching a failed login issue that is triggering our monitoring software. Researching the issue, the only other information I could find that was exactly what I was seeing, was on here: Event 4625 Audit Failure NULL SID failed network…
Paul
  • 31
  • 3
3
votes
3 answers

How to fix: The description for event ID %i from source %s cannot be found?

I need to troubleshoot some WMI crashes we are suffering from. Unfortunately the event log doesn't show any details as the descriptions are missing. This is what the log says: The description for Event ID 5612 from source **Microsoft-Windows-WMI**…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
3
votes
1 answer

where to see SQL Server start/stop logs?

I want to know where to see SQL Server start/stop logs for each instances and SQL Server agent/job start/stop logs? I am developing some tools to monitor SQL Server status. I am using SQL Server 2008 Enterprise. thanks in advance, George
George2
  • 1,137
  • 6
  • 22
  • 41
3
votes
1 answer

App pool gets stuck on reset and takes .net pages out

Several times after our app pool has been told to reset, it gets stuck, the .net pages go down and the following error appears in the application event log: Failed to execute request because the App-Domain could not be created. Error: 0x80070057 The…
user8042
  • 278
  • 1
  • 4
3
votes
0 answers

Permission for creating an event source

I have a WCF logging service that can write to the event log. The only problem is that the event source it writes to has to already exist and it cannot create it because the app pool the service is running under doesn't have admin privileges. Can…
BVernon
  • 403
  • 1
  • 7
  • 19
3
votes
1 answer

Event ID 12240 on Windows Server 2012

I have a Windows Server 2012 and some virtual machines in it. Since last week some error events appears hourly on event viewer saying that the system cannot find a remote VHD file. This VHD file is not available anymore but no one of my virtual…
Ederson
  • 575
  • 2
  • 8
  • 13
3
votes
1 answer

How to find core dumps mentioned in event log

When I search for the files the event log mentions they are not there. Well, the bottom one is there but there's no helpful information in that file. This event was created by the Windows Error Reporting mechanism. What do I need to do in order to…
BVernon
  • 403
  • 1
  • 7
  • 19
3
votes
1 answer

WMI command line event log acess

Can someone explain me how to get access to arbitrary system logs in eventlog service files? Now I'm poking around WMI(wmic.exe) and trying to execute following commands: For system services like applications this approach works ok: WMIC NTEVENT…
user3441253
  • 133
  • 1
  • 5
3
votes
2 answers

Windows Server 2008 R2 Source-Initiated Event Log Forwarding: No Source Servers Reporting

I have a Server 2008 R2 server acting as a collector for two other servers. One is 2008 R2 as well, the other is 2012 R2. Collector Initiated forwarding works just fine, and that's really the only type I've ever implemented. I decided to have a go…
Tohuw
  • 498
  • 2
  • 9
  • 24
3
votes
1 answer

Windows Forward Events Missing User Data and Description

I have Subscription Events set to forward windows server 2008's Terminal Services/LocalSessionManager/Operational logs to another window's server 2008's Forward Events section. The Subscription Event is set with a HeartbeatInterval value of 300 (and…
user220643
  • 49
  • 1
  • 4
3
votes
1 answer

Event logger won't start: error 2 The system cannot find the file specified, Windows server 2008R2

NOTE: this is a "spawn" of a previous post which dealt with 2 different issues and became too lengthy, so I decided to clean the original question and post this issue in a separate question When I try to start Windows Event Log via net start…
alex440
  • 213
  • 1
  • 3
  • 9
3
votes
1 answer

Windows 2008 R2 services not working

EDIT I spawned the Windows events logging service won't start issue to a separate question here I have a strange problem: SQLAGENT won't start Windows events logging service won't start Today I tried to copy a db to test some changes, and…
alex440
  • 213
  • 1
  • 3
  • 9
3
votes
1 answer

wevtutil requires Run As Admin for Security log (but not for System), or how to Run As Admin for Task

I'm using this query to check for certain Exchange account changes on my Windows 2008 R2 AD primary: wevtutil qe Security /q:"*[System/EventID=5136]" /f:text /rd:true /c:1 I'm making a batch file out of it in order to send the event's contents as…
armani
  • 420
  • 1
  • 9
  • 26
3
votes
1 answer

Creating a System Event for Newly Created 10 Gig Files in a specific directory

I'm looking to find some way that my Windows Small Business Server 2011 machine can auto create system events any time there is a newly created file 10 GBs and larger in a specific directory. It seems that the ideal tool to use is the File System…
user3097210
  • 31
  • 1
3
votes
3 answers

Query specific logs from event log using nxlog

Below is my nxlog configuration define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log Module …
user170899
  • 69
  • 1
  • 2
  • 6
1 2 3
…
41 42