Event log - Kernal Event Tracing log issue - should I worry? 1

[stduc]

I seem to be getting quite a few of these warnings in my Event log lately. Should I be bothered? If so, what do I need to do to prevent the problem?

The backing-file for the real-time session "WDC.BE95A9B1-DE15-4B78-B923-A12AB70BE951" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.

- <Event xmlns="

http://schemas.microsoft.com/win/2004/08/events/event">

- <System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>1</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>10</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2010-11-01T19:29:19.008914600Z" />
<EventRecordID>574</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="3064" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>CMaster.Cmaster</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="SessionName">WDC.BE95A9B1-DE15-4B78-B923-A12AB70BE951</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">256</Data>
</EventData>
</Event>

 

[linney]

This response suggests that you just increase the size of the log file and forget about the error.

Event-Kernal tracing

http://answers.microsoft.com/en-us/...-tracing/25b06390-ebbc-471b-b5fc-bea1cc202f09

 

[stduc]

Thanks for that. However I can't see how you increase the log file size or even where you go to change it. I'm feeling a right dumbo now but I think I need step by step instructions.

 

[guitarzan]

Run eventvwr.msc, do a right-click over the log (For example, System or Application etc) and select Properties. Size and other options are there.

 

[stduc]

Many thanks - done - wasn't easy to find the relevant log though - Microsoft-Windows-Kernel-EventTracing/Admin

At least I hope that's the one.