locked
Error in W7 event log RRS feed

  • Question

  • Good morning to everyone!

    i notice some strange slowdown in my machine with W7 pro. 

    In the event log i have these 3 error/warnings just before the starting of the issues. what are they caused by?

    Nome registro: Application
    Origine:       Microsoft-Windows-WMI
    Data:          15/11/2018 08:33:09
    ID evento:     10
    Categoria attività:Nessuna
    Livello:       Errore
    Parole chiave: Classico
    Utente:        N/D
    Computer:      bernj2-PC
    Descrizione:
    Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.
    XML evento:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
        <EventID Qualifiers="49152">10</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2018-11-15T07:33:09.000000000Z" />
        <EventRecordID>45743</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>Application</Channel>
        <Computer>bernj2-PC</Computer>
        <Security />
      </System>
      <EventData>
        <Data>//./root/CIMV2</Data>
        <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
        <Data>0x80041003</Data>
      </EventData>
    </Event>
    
    Nome registro: Microsoft-Windows-Kernel-EventTracing/Admin
    Origine:       Microsoft-Windows-Kernel-EventTracing
    Data:          15/11/2018 08:40:18
    ID evento:     3
    Categoria attività:Sessione
    Livello:       Errore
    Parole chiave: Sessione
    Utente:        SYSTEM
    Computer:      bernj2-PC
    Descrizione:
    Sessione "EventLog-AirSpaceChannel" interrotta a causa degli errori seguenti: 0xC0000188
    XML evento:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>3</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>14</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2018-11-15T07:40:18.188800100Z" />
        <EventRecordID>843</EventRecordID>
        <Correlation />
        <Execution ProcessID="4" ThreadID="228" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>bernj2-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SessionName">EventLog-AirSpaceChannel</Data>
        <Data Name="FileName">C:\Windows\System32\Winevt\Logs\AirSpaceChannel.etl</Data>
        <Data Name="ErrorCode">3221225864</Data>
        <Data Name="LoggingMode">129</Data>
      </EventData>
    </Event>
    
    Nome registro: Microsoft-Windows-Kernel-EventTracing/Admin
    Origine:       Microsoft-Windows-Kernel-EventTracing
    Data:          15/11/2018 08:40:18
    ID evento:     4
    Categoria attività:Registrazione
    Livello:       Avviso
    Parole chiave: Sessione
    Utente:        SYSTEM
    Computer:      bernj2-PC
    Descrizione:
    È stata raggiunta la dimensione massima del file della sessione "EventLog-AirSpaceChannel". Pertanto, gli eventi potrebbero essere persi (non registrati) nel file "C:\Windows\System32\Winevt\Logs\AirSpaceChannel.etl". La dimensione massima dei file è attualmente impostata su 1048576 byte.
    XML evento:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>4</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>1</Task>
        <Opcode>10</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2018-11-15T07:40:18.188800100Z" />
        <EventRecordID>842</EventRecordID>
        <Correlation />
        <Execution ProcessID="4" ThreadID="228" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>bernj2-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SessionName">EventLog-AirSpaceChannel</Data>
        <Data Name="FileName">C:\Windows\System32\Winevt\Logs\AirSpaceChannel.etl</Data>
        <Data Name="ErrorCode">3221225864</Data>
        <Data Name="LoggingMode">129</Data>
        <Data Name="MaxFileSize">1048576</Data>
      </EventData>
    </Event>

    Thursday, November 15, 2018 8:21 AM

All replies

  • Hi andrea vironda,

    Thanks for posting your query.

    Did you do any changes before the issue occurs? 

    Event ID 10 is an issue in the creation process that caused a WMI registration to remain in the DVD/ISO.

    You can refer to this document to solve this message: 

    Event ID 10 is logged in the Application log after you install Service Pack 1 for Windows 7 or Windows Server 2008 R2

    And the error 0xC0000188 will not affect the operation of your computer.

    Best regards,

    Yilia 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Friday, November 16, 2018 10:14 AM
  • Hi andrea vironda,

    Is there anything I can do for you?

    If you have any problems or concerns, please feel free to post here. 

    Best regards,

    Yilia


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, November 19, 2018 1:26 AM
  • Hi,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.   

    Best regards,

    Yilia



    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, November 21, 2018 1:25 AM