"Event log" usually refers to the system/server logs on Microsoft Windows machines.

learn more… | top users | synonyms

0
votes
1answer
144 views

Is it possible to connect WinServer eventlog from other domain

I have a virtual machine with Windows Server R2 Ent. In this machine runned domain controler test.local. I have admin(doamin and local) account on this machine. I want to get access to event log of ...
0
votes
1answer
111 views

Reporting critical Event ID to email

How do you organize or implement monitoring system in your domain to monitor these critical error on your workstations and servers ? Hardware Related: 7, 9, 11, 51, 52, 55 Potential HD related issue ...
-2
votes
1answer
1k views

Windows XP clients strange message in event log [closed]

I am getting the following error message in the event log of many of my windows XP clients The COM+ Event System failed to create an instance of the subscriber ...
1
vote
0answers
415 views

Cannot open log for source 'blah'. You may not have write access

I'm attempting to write to a custom event log .... but I get the error: Win32Exception Access Is Denied Cannot open log for source 'blah'. You may not have write access. I've trawled the net.. ...
2
votes
1answer
966 views

WMI query of Win32_Product creates events in the W2K8+ Application Event Log

On Windows Server 2008 and Windows Server 2008 R2 querying installed software with WMI and the Win32_Product class events are written to the Application event log. The events are purely informational ...
0
votes
1answer
60 views

aggregate local events in AD

How can I aggregate events from event viewer log (logins with local Administrator) from all computers (atleast the servers - 2003,2008,2008r2) in an AD domain?
0
votes
1answer
730 views

Moss 2007 - Event Log EventId:7888 Windows NT user or group not found

I am getting this event in my Application event log: Event Type: Error Event Source: Office SharePoint Server Event Category: Office Server General Event ID: 7888 Date: 11/8/2010 Time: 11:15:36 AM ...
0
votes
1answer
995 views

Security Event Log: User field = N/A

In my Windows Server 2008 R2 Enterprise Security Event Log all entries have 'N/A' for the "User:" field. Is there something I can do to have this field filled in? I noticed that this information is ...
0
votes
2answers
817 views

How do I filter the Security Log using XML for the following data

A manager has asked me to log the start and stop times and dates when a user launches a particular program (Starcraft II). I have enabled logging on the user's machine so that it will report all ...
1
vote
1answer
242 views

In xperf (Windows ETW) what's the difference between the 'CPU Sampling by Process' and 'CPU Usage by Process' graphs in the xperf viewer?

The values are tracking very closely, however the 'CPU Sampling by Process' appears to be less fine grained in it's data. I can't find anything in the documentation to differentiate these two.
3
votes
3answers
121 views

creating a journal/blog

im trying to replace our current journal (excel sheet) with a web portal based journal. something kind of like twitter, but with more options. also needs to have a login so we can track the people ...
1
vote
1answer
587 views

How can I create an event trace with logman.exe on W2K8?

For various reasons, I'd like to get a trace of disk accesses on some Windows Server 2008 machines. I can set up a user defined data collector set in the Reliability and Performance Monitor tool to ...
2
votes
5answers
4k views

What is the best tool for to capturing Windows Event Logs centrally?

We have a collection of about 100 Windows 2003 and Windows 2008 R2 domain controllers that I would like to start capturing Event Log data from. Many of the servers are very busy and generate large ...
2
votes
1answer
227 views

Server 2003 DNS Auditing

I used the instructions on the following link to set up DNS auditing on Server 2003: http://blogs.technet.com/b/yuridiogenes/archive/2008/03/06/auditing-a-dns-zone.aspx It works. When ever a forward ...
2
votes
1answer
687 views

IIS, Application Pools and Event Logs

Running IIS 6 on a handful of Windows 2003 Web Ed. servers. Each has some App Pools configured with "Idle Timeout" of x minutes. No recycling, just the idle timeout from the Properties Performance ...
2
votes
2answers
3k views

Tracking who installed Software on server

Am I correct, that if a program is installed on a Server and shows up in the 'Add Remove/Program programs', then it must have been installed when a user has logged onto the server either at the ...
1
vote
1answer
261 views

search logs for events associated with Task Scheduler

I'm working with a Server08 box (Web Edition) where the Task Scheduler had run a set of unchanged housekeeping scripts for months. Over the last week, Scheduler has failed to start scripts twice. ...
1
vote
2answers
1k views

Where to grant an account permissions for event log

My asp.net application does not have the permission to write to windows event log. It is running under Network Service account. Is there any tool/management console rather than hack in the registry to ...
1
vote
2answers
925 views

Setting database option COMPATIBILITY_LEVEL to 100 for database ReportServerTempDB

The error log on my sql server throws this warning every 5 seconds 'Setting database option COMPATIBILITY_LEVEL to 100 for database ReportServerTempDB.' From what I can tell this may be due to my ...
0
votes
2answers
2k views

What could cause a flurry of Microsoft-Windows-Servicing events?

I have a windows 2k8 machine that generated almost 40,000 WinEventLog:System events in the period of about 20 minutes. The breakdown of these events by eventcode was approximately: 4373 46% 4371 ...
1
vote
2answers
367 views

Syslog - capturing event logs from Win2k boxes

I asked this question in SuperUser without much luck and so I am posting it here to see if anyone can assist. We have a central syslog server and we want it to capture event log events from Windows ...
1
vote
2answers
716 views

What's spamming my System event log?

The following event floods the log pretty harshly, pushing out other important events from the record. Is there any way to determine from the data which service is failing? Event Type: Error Event ...
1
vote
1answer
662 views

Enable Permissions To Write To Event Log

I have an ASP .Net app running on a windows 2003 server. If the application throws an exception I want the exception to be written to the event log. I have this implemented but when an exception is ...
0
votes
5answers
1k views

Does one usually monitor the Event Log on Windows servers?

I'm a programmer not a sysadmin but as we had a lot of trouble with our servers I thought I would be proactive and help our overworked (and learning) sysadmins. We have 20-25 or so Windows Servers ...
0
votes
1answer
1k views

Get the “source network address” in Event ID 529 audit entries on Windows XP

In windows server 2003 when an Event 529 (logon failure) occures with a logon type of 10 (remote logon), the source network IP address is recorded in the event log. On a windows XP machine, this (and ...
0
votes
1answer
415 views

Windows: Audit/View logins from remote networks?

i want to audit remote connection attempts to a Windows 2003 Server. i've changed the group policy to show logon successes and failures: >gpedit.msc Local Computer Policy Computer ...
0
votes
2answers
2k views

SQL Server database constantly restarting

We have SQL Server 2008 Express installed on a Windows 2003 server. Looking at the event log, one of the databases appears to be restarting anywhere from every couple seconds to every 15 to 30 ...
1
vote
1answer
2k views

Cannot start eventlog service

On a windows 2k8R2 DC box the eventlog service wont start. When i try to start the service the machine returns: "Windows could not start the Windows Event Log service on Local Computer. Error 13: ...
2
votes
1answer
1k views

Tracking which computer printed a document on Windows 2003 domain

Currently, when a user prints a document there is an Event ID 10 recorded in our event log. We have mostly XP Clients on a Win2003 domian. However, I cannot tell which computer this user printed a ...
1
vote
1answer
409 views

How to get Unique Log on & Log off event in windows

I want to get unique logon & log off event from my pc. In the event viewer i can see more then one entry for login & log out event. I check most of the event details but could not found unique ...
1
vote
1answer
777 views

Could not start the event log service on Local Computer

I'm getting a strange error on my windows 2003 R2 - Enterprise Edition w/ service pack 2 server Could not start the event log service on Local Computer Error 1075: The dependency service does not ...
4
votes
4answers
3k views

“Account locked out” security event at midnight

The last three midnights I've gotten an Event ID 539 in the log...about my own account: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: ...
2
votes
3answers
944 views

Can Windows logoff events be tracked?

I'm working on an application to track network user logon/logoff events in an Active Directory domain; the application will work by auditing security logs on domain controllers. Auditing logon events ...
0
votes
1answer
7k views

Is it possible to enable logging of RDP connections / disconnections under Windows XP and Windows 7?

As the title suggests, I'm trying to keep an eye on RDP connections / disconnections to a couple of machines. One's running Windows XP and one's running Windows 7. I've checked the event logs on the ...
5
votes
1answer
516 views

Distributed Server Monitoring Solution [closed]

I belong to an independent IT firm that manages and maintains about 50 business clients networks, ranging from small 5 system networks to 200+ systems. Because we are unable to directly monitor each ...
1
vote
1answer
88 views

I would like to prevent these entries from being added to the eventlog

Our client's application EventLog is getting filled up with warnings due to a bug in the Microsoft SQL Server report viewer control, http://support.microsoft.com/kb/973219. They have thousands of ...
0
votes
1answer
69 views

View logs of shutdowns? [Vista]

I'm a normal user with Windows Vista Professional. How do I check the previous date and time when my computer is shutdown?
0
votes
1answer
492 views

psloglist -w into a file

I'm trying to redirect windows event log continuously into a file. psloglist.exe has the -w feature (that listens for new events and outputs to console) so I tried combining it with redirection into ...
1
vote
1answer
7k views

How to avoid Master Browser errors, MRxSmb Event ID 8003?

I have a domain with Windows SBS 2003 as domain controller. It's very common to get Master Browser errors in the logs, MRxSmb Event ID 8003. How can I avoid that? What have I done wrong? I know how ...
0
votes
2answers
127 views

windows 2003 server policy error

i saw these two errors on my windows 2003 server from last few days can you please tell me what is these errors and how to remove them
1
vote
2answers
2k views

Windows Server 2008 Send Error Message on Event Log Error

We currently have a Windows Server 2008 machine that we have configured with a Custom Task to send an email whenever an error occurs in a certain Event Log. The trigger works perfectly, and sends ...
1
vote
1answer
2k views

Why does Windows Event Log stop logging events before maximum log size is reached?

I have a service that produces a lot of event log output. Currently the event log is configured to overwrite any old events to keep the log from ever getting full. We have also increased the event log ...
2
votes
2answers
913 views

How to disable Event log message about adhoc error message when using RaisError?

Some of the developers are using the following syntax in RaiseError: RAISERROR('My business error message', 16, 0) With the purpose of reusing the catch part of the try..catch block for business ...
2
votes
2answers
764 views

How to control/check CheckPoint rules changes (and another System events)

I need to check/control all system events on many CheckPoint FW1 - don't misunderstand - not rules triggering, but events such admins log on, rules changes and etc. I found out that I can make an log ...
1
vote
2answers
2k views

Event ID for modified GPOs

I have to know, who (usersid or loginname) changed a specified GPO for a specified OU in the Active Directory. Given our audit settings include this, what would be the right Event ID to look for?
1
vote
2answers
411 views

A lot of logon/logoffs events in Windows event log

I have a server that contains Team Foundation Server which we use for source control. This server is windows server 2003, however it is not our domain server. When we do a large 'get latest version' ...
-1
votes
1answer
210 views

EventID 333 in Windows Server 2003

Can somebody please let me know is there any problem that this error can cause if we don't apply any fix to it. Please let me know. Thanks!
4
votes
5answers
1k views

Forwarding Windows log event using TCP

I'm looking for a way to safely centralize all my Windows and Linux logs on one location. Since I'm in a mixed environment, with both Linux and Windows, I started using Syslog-ng on the Linux boxes ...
1
vote
2answers
58 views

Where can I find a list of the Windows EventCodes and their definitions?

It's fallen to me recently to sift through Windows logs and do some analysis on them. To start, I'm trying to get familiar with the EventCodes, but I've not had much success finding any comprehensive ...
3
votes
2answers
506 views

Open source scripting log analysis: tools for breaking stderr log messages into groups (normal bugs vs abnormal) or looking at trends (we're getting less of this message and more of that one)

Imagine some linux systems with scripts of various kinds (mostly PERL but it could be anything that writes to STDERR) which are run 100s of times by different users with slightly different needs. ...