Guest Patty Posted August 18, 2008 Posted August 18, 2008 I recently checked the Event Viewer for System in my computer and discovered that nothing has been logged there since 8/28/2004. Does that mean I've had no errors or anything to be logged or does it mean that somehow the logging has gotten turned off? I do show current log information for Antivirus and Application, but wonder why System stopped in August 2004? Any info greatly appreciated. Patty
Guest Gerry Posted August 18, 2008 Posted August 18, 2008 Re: Event Viewer - System Patty Some users think that Event Viewer is not needed and turn it off. In my view they are mistaken. Select Start, Control Panel, Administrative Tools, Services and right click on Event Log. Select Properties and change the StartUp type to Automatic. You can also start the service manually. You may also choose to do the same for the Error Reporting Service. Given that the service has not been running for some years you may find you have a fair number of problems to resolve. Concentrate on Error and Warning Reports in the System log first before the Application log. Understanding the Reports can be a challenge. Work through the log from the time of the latest boot< Do not woryy about errors in earlier boots except to see whether a current error has been occuring previously. To be worthy of serious investigation an error nneeds to repeat. The best way to solve a problem is often just to restart the computer. If the Error repeats you then need to find out why. If you post copies of Error and Warning Reports appearing in the System and Application logs in Event Viewer for the last boot. No Information Reports or Duplicates please. Indicate which also appear in a previous boot. You can access Event Viewer by selecting Start, Control Panel, Administrative Tools, and Event Viewer. A tip for posting copies of Error Reports! Run Event Viewer and double click on the error you want to copy. In the window, which appears is a button resembling two pages. Click the button and close Event Viewer.Now start your message (email) and do a paste into the body of the message. Make sure this is the first paste after exiting from Event Viewer. HOW TO: View and Manage Event Logs in Event Viewer in Windows XP http://support.microsoft.com/kb/308427/en-us -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ Patty wrote: > I recently checked the Event Viewer for System in my computer and > discovered that nothing has been logged there since 8/28/2004. Does > that mean I've had no errors or anything to be logged or does it mean > that somehow the logging has gotten turned off? I do show current log > information for Antivirus and Application, but wonder why System > stopped in August 2004? > > Any info greatly appreciated. > > Patty
Guest Patty Posted August 19, 2008 Posted August 19, 2008 Re: Event Viewer - System On Mon, 18 Aug 2008 19:03:11 +0100, Gerry wrote: > Patty > > Some users think that Event Viewer is not needed and turn it off. In my > view they are mistaken. > > Select Start, Control Panel, Administrative Tools, Services and right > click on Event Log. Select Properties and change the StartUp type to > Automatic. You can also start the service manually. You may also choose > to do the same for the Error Reporting Service. > > Given that the service has not been running for some years you may find > you have a fair number of problems to resolve. Concentrate on Error and > Warning Reports in the System log first before the Application log. > Understanding the Reports can be a challenge. Work through the log from > the time of the latest boot< Do not woryy about errors in earlier boots > except to see whether a current error has been occuring previously. To > be worthy of serious investigation an error nneeds to repeat. The best > way to solve a problem is often just to restart the computer. If the > Error repeats you then need to find out why. > > If you post copies of Error and Warning Reports appearing in > the System and Application logs in Event Viewer for the last boot. No > Information Reports or Duplicates please. Indicate which also appear in > a previous boot. > > You can access Event Viewer by selecting Start, Control Panel, > Administrative Tools, and Event Viewer. > > A tip for posting copies of Error Reports! Run Event Viewer and double > click on the error you want to copy. In the window, which appears is a > button resembling two pages. Click the button and close Event > Viewer.Now start your message (email) and do a paste into the body of > the message. Make sure this is the first paste after exiting from > Event Viewer. > > HOW TO: View and Manage Event Logs in Event Viewer in Windows XP > http://support.microsoft.com/kb/308427/en-us Hi, thanks for your reply. Actually I cleared the log after saving it, and now it is working. I finally figured out that the file was to its maximum size, but what I can't figure out is why it didn't just delete the older entries to make new ones as all the other logs did (it was set to do so.) If the System log is the one ending in .evt, it was not recording anything either. Thanks again. Patty
Guest Gerry Posted August 19, 2008 Posted August 19, 2008 Re: Event Viewer - System Patty Check one of the overwrite options. Start, Control Panel, Adminisrative Tools, Event Viewer, right click on System, select Properties and you will see the overwrite options on the General tab. -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ Patty wrote: > On Mon, 18 Aug 2008 19:03:11 +0100, Gerry wrote: > >> Patty >> >> Some users think that Event Viewer is not needed and turn it off. In >> my view they are mistaken. >> >> Select Start, Control Panel, Administrative Tools, Services and right >> click on Event Log. Select Properties and change the StartUp type to >> Automatic. You can also start the service manually. You may also >> choose to do the same for the Error Reporting Service. >> >> Given that the service has not been running for some years you may >> find you have a fair number of problems to resolve. Concentrate on >> Error and Warning Reports in the System log first before the >> Application log. Understanding the Reports can be a challenge. Work >> through the log from the time of the latest boot< Do not woryy about >> errors in earlier boots except to see whether a current error has >> been occuring previously. To be worthy of serious investigation an >> error nneeds to repeat. The best way to solve a problem is often >> just to restart the computer. If the Error repeats you then need to >> find out why. >> >> If you post copies of Error and Warning Reports appearing in >> the System and Application logs in Event Viewer for the last boot. No >> Information Reports or Duplicates please. Indicate which also appear >> in a previous boot. >> >> You can access Event Viewer by selecting Start, Control Panel, >> Administrative Tools, and Event Viewer. >> >> A tip for posting copies of Error Reports! Run Event Viewer and >> double click on the error you want to copy. In the window, which >> appears is a button resembling two pages. Click the button and close >> Event Viewer.Now start your message (email) and do a paste into the >> body of the message. Make sure this is the first paste after exiting >> from Event Viewer. >> >> HOW TO: View and Manage Event Logs in Event Viewer in Windows XP >> http://support.microsoft.com/kb/308427/en-us > > Hi, thanks for your reply. Actually I cleared the log after saving > it, and now it is working. I finally figured out that the file was > to its maximum size, but what I can't figure out is why it didn't > just delete the older entries to make new ones as all the other logs > did (it was set to do so.) > > If the System log is the one ending in .evt, it was not recording > anything either. > > Thanks again. > > Patty
Guest Patty Posted August 20, 2008 Posted August 20, 2008 Re: Event Viewer - System On Tue, 19 Aug 2008 22:24:04 +0100, Gerry wrote: > Patty > > Check one of the overwrite options. > > Start, Control Panel, Adminisrative Tools, Event Viewer, right click on > System, select Properties and you will see the overwrite options on the > General tab. Overwrite events older than 7 days is checked. But evidently that didn't happen. Patty
Guest Gerry Posted August 20, 2008 Posted August 20, 2008 Re: Event Viewer - System Patty Does the Event Log service start? Is the service set to start automatically? -- Hope this helps. Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ Patty wrote: > On Tue, 19 Aug 2008 22:24:04 +0100, Gerry wrote: > >> Patty >> >> Check one of the overwrite options. >> >> Start, Control Panel, Adminisrative Tools, Event Viewer, right click >> on System, select Properties and you will see the overwrite options >> on the General tab. > > Overwrite events older than 7 days is checked. But evidently that > didn't happen. > > Patty
Guest Patty Posted August 20, 2008 Posted August 20, 2008 Re: Event Viewer - System On Wed, 20 Aug 2008 07:30:08 +0100, Gerry wrote: > Patty > > Does the Event Log service start? Is the service set to start > automatically? Yes. It's set to Automatic and is started. It's logging events now. I've not changed anything there. The original log file was 512K, which is the setting for the maximum file size. I think, for some reason, it stopped logging when it got to that point. The other logs did remove the old entries and replaced them with new. Only the system log stopped logging new events. All settings are the same for all the logs. Patty
Guest Gerry Posted August 20, 2008 Posted August 20, 2008 Re: Event Viewer - System Patty Did you find any interesting Warning or Error Reports in the System log since it restarted? ~~~~ Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ Patty wrote: > On Wed, 20 Aug 2008 07:30:08 +0100, Gerry wrote: > >> Patty >> >> Does the Event Log service start? Is the service set to start >> automatically? > > Yes. It's set to Automatic and is started. It's logging events now. > I've not changed anything there. The original log file was 512K, > which is the setting for the maximum file size. I think, for some > reason, it stopped logging when it got to that point. The other logs > did remove the old entries and replaced them with new. Only the > system log stopped logging new events. All settings are the same for > all the logs. > > Patty
Guest Patty Posted August 20, 2008 Posted August 20, 2008 Re: Event Viewer - System On Wed, 20 Aug 2008 14:11:44 +0100, Gerry wrote: > Patty > > Did you find any interesting Warning or Error Reports in the System log > since it restarted? > > > > ~~~~ > > > Gerry > ~~~~ > FCA > Stourport, England > Enquire, plan and execute > ~~~~~~~~~~~~~~~~~~~ > Patty wrote: >> On Wed, 20 Aug 2008 07:30:08 +0100, Gerry wrote: >> >>> Patty >>> >>> Does the Event Log service start? Is the service set to start >>> automatically? >> >> Yes. It's set to Automatic and is started. It's logging events now. >> I've not changed anything there. The original log file was 512K, >> which is the setting for the maximum file size. I think, for some >> reason, it stopped logging when it got to that point. The other logs >> did remove the old entries and replaced them with new. Only the >> system log stopped logging new events. All settings are the same for >> all the logs. >> >> Patty No, just informational stuff about known services starting and stopping (expected). I did have a dhcp warning, but that was resolved when I power cycled my router. Patty
Guest Gerry Posted August 20, 2008 Posted August 20, 2008 Re: Event Viewer - System That's fine Patty. Sighing off. -- ~~~~ Gerry ~~~~ FCA Stourport, England Enquire, plan and execute ~~~~~~~~~~~~~~~~~~~ Patty wrote: > On Wed, 20 Aug 2008 14:11:44 +0100, Gerry wrote: > >> Patty >> >> Did you find any interesting Warning or Error Reports in the System >> log since it restarted? >> >> >> >> ~~~~ >> >> >> Gerry >> ~~~~ >> FCA >> Stourport, England >> Enquire, plan and execute >> ~~~~~~~~~~~~~~~~~~~ >> Patty wrote: >>> On Wed, 20 Aug 2008 07:30:08 +0100, Gerry wrote: >>> >>>> Patty >>>> >>>> Does the Event Log service start? Is the service set to start >>>> automatically? >>> >>> Yes. It's set to Automatic and is started. It's logging events >>> now. I've not changed anything there. The original log file was >>> 512K, which is the setting for the maximum file size. I think, for >>> some reason, it stopped logging when it got to that point. The >>> other logs did remove the old entries and replaced them with new. >>> Only the system log stopped logging new events. All settings are >>> the same for all the logs. >>> >>> Patty > > No, just informational stuff about known services starting and > stopping (expected). I did have a dhcp warning, but that was > resolved when I power cycled my router. > > Patty
Recommended Posts