Corrupt event logs

[mortsdeh]

Hi,

Our company delivers an application together with the hardware to run it on. In this case the server is running Windows 2003 Server. During a test weekend the event logs on that server became corrupt and couldn't be read. I don't know how but the issue has been resolved so that the event logs now are readable.

My question is: What could cause the event logs to be corrupt and how can I make sure that it wont happen again?

Best
/M

 

[Stevehewitt]

That's a pretty generic question.

Could be a number of things. Worth looking to see how they are setup in the local (or domain) GPO's. Could be a one off, could be another application on the server is trying to hook into the event logs and it's cacked it up.

I'm affraid it really could be a number of things. I would start with the GPO's. Make sure that the size of the logs is limited, and when full the event log writes over the olders logs.

Good Luck,




Steve.

"They have the internet on computers now!" - Homer Simpson