none
Event Viewer will not display any logs

    Question

  • We have been unable to access any log files through the Event Viewer in Windows 2012 Server Essentials. We have tried restarting the logging service with no luck. Has anyone had this issue and , if so, what was the solution for the problem?
    Monday, May 15, 2017 9:23 PM

All replies

  • Hi,

    So the Event Viewer not showing logs at all in all categories -Application, System, etc.?
    At the top of the Event pane on the right, does it show a number of events, or just 0? right-click on each Event type (Application, System, etc.) and check the Properties that it is set up correctly to record events, and the log file size isn't set to zero.

    First, if you highlight the application log and hit f5 to refresh, do the events become visible? It can take some time

    If you still will not be able to see events then it might me corrupt event log file. 

    In such a case, you want to set the Event Log service to disabled.  Reboot.  After reboot, go to C:\Windows\System32\winevt\Logs and rename the application.evtx to application.evtx.old (or something similar).  Then, set the Event Log service back to Automatic.  Reboot again.  You are now working with a fresh application event log file.  See if this fixes your issue.

    ------------------------------------------------------------------------------------------------------------

    If you found this post helpful, please give it a "Helpful" vote. 
    Please remember to mark the replies as answers if they help.
    (nedimmehic.org)


    Thursday, May 18, 2017 9:49 AM
  • Thanks for the response.

    We receive the following error message:

    Event Viewer cannot open the event log or customer view. Verify that Event Log Service is running or query is too long. The RPC server is too busy to complete this operation.

    We have checked and the Event Viewer Service is running. 

    Friday, May 19, 2017 5:16 PM
  • Hi,

    Can you try to clear the log for example application, click on clear and then save and clear. Give the logfile a name, and then click the Save button to continue. Check if even viewer is running. 

    If that is not the option you can check that what I wrote above about renaming for exemple application log file.

    ------------------------------------------------------------------------------------------------------------

    If you found this post helpful, please give it a "Helpful" vote. 
    Please remember to mark the replies as answers if they help.
    (nedimmehic.org)



    Friday, May 19, 2017 7:37 PM
  • Hi,

    You may also try to use command to clear event log:
    wevtutil sl <LogName> /ca:<SecurityDescriptor>

    Reference - Clear an Event Log - for details:
    https://technet.microsoft.com/en-us/library/cc722318(v=ws.11).aspx

    If the problem persists, please try to re-start the server in Clean Boot(with 3rd party process disabled) and check the result. or, using “sfc /scannow” to check/repair system files. 

    Best Regards,
    Eve Wang

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, May 23, 2017 8:11 AM
    Moderator