When I use the Event Viewer on MachineA, all local AND remote event logs are BLANK (empty, nada).
When I use the an Event Viewer on MachineB (or MachineC) to look at MachineA's log files, all of MachineA's event logs are active and contain valid information.
Normally, when you use the Event Viewer to look at an empty log file, the message "There are no items to show in this view" is displayed instead of the events - in this case, on MachineA, the logs are just emply and blank - there is no message.
All events on MachineA are checked as active, and no filters are in place. EVERYTHING gets logged.
The log files are set to 512k, then start to overwrite.
When I check \WINNT\System32\Config\*.evt, all files are between 64k & 512k, with recent (or current) date stamps.
MachineA & MachineB are Win2k Servers with SP4.
MachineA is AD Master, Exchange 5.5, DNS Master, DHCP Master
MachineC is WinXP Pro SP2
is not the solution - SP4 is supposed to include this fix.
Is the Event Viewer on MachineA broken? If so, what steps should I take?
When I use the an Event Viewer on MachineB (or MachineC) to look at MachineA's log files, all of MachineA's event logs are active and contain valid information.
Normally, when you use the Event Viewer to look at an empty log file, the message "There are no items to show in this view" is displayed instead of the events - in this case, on MachineA, the logs are just emply and blank - there is no message.
All events on MachineA are checked as active, and no filters are in place. EVERYTHING gets logged.
The log files are set to 512k, then start to overwrite.
When I check \WINNT\System32\Config\*.evt, all files are between 64k & 512k, with recent (or current) date stamps.
MachineA & MachineB are Win2k Servers with SP4.
MachineA is AD Master, Exchange 5.5, DNS Master, DHCP Master
MachineC is WinXP Pro SP2
is not the solution - SP4 is supposed to include this fix.
Is the Event Viewer on MachineA broken? If so, what steps should I take?
