locked
Forwarded Events - Event Viewer cannot open the event log RRS feed

  • Question

  • I believe i have all correct setup for event forwarding. All tests seem to check out. Unfortunately when trying to open the Forwarded Events in the Event Viewer on the collector I get the following error. "Event Viewer cannot open the event log or custom view. Verify that the Event Log service is running or query is too long. (5) "

    I have both the machine and user a member of the Builtin Even Log Readers Group.

    Any help is appreciated.


    SteveS



    • Edited by Steven S Tuesday, January 16, 2018 5:51 PM
    Tuesday, January 16, 2018 5:44 PM

Answers

  • Steven,

    that's the Powershell forum here - it's about scripting. You might ask this in the Windows Server General Forum.


    Best regards,

    (79,108,97,102|%{[char]$_})-join''

    • Marked as answer by Steven S Tuesday, January 16, 2018 6:20 PM
    Tuesday, January 16, 2018 5:59 PM

All replies