none
File auditing Logs

    Question

  • I have enabled file auditing as per standard steps but I am not receiving the logs that who edit, copy, past, files in the event viewer, Security Log Not Logging Events, it says that The event logging service has shut down. So I kindly request you please share your experience with me in this regard. thanks friends
    Thursday, August 6, 2015 8:25 AM

Answers

  • Hi,

    Thanks for your post.

    Windows Event Log service maintains a set of event logs that the system, system components, and applications use to record events. If the service is not start, then the configured autit events would be unable to logged and you can't check them in the system event log.

    Hereby is a article to fix the event log service not start, you can check it for some reference:

    http://www.thewindowsclub.com/windows-event-log-service-not-starting

    Hope it helps.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, August 11, 2015 7:35 AM
    Moderator