What is the Event Viewer, and should I care?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

we're using the event log to capture errors in our development project (go us!) - however on two different machines running the same application event viewer displays different descriptions: one always prefixes the description with "The Description for Event ID (0) ... cannot be found", and the other doesn't - any ideas why? (searching on the web returns results with this string but not a reason why it occurs)

and a tip for anyone wanting to find more info on an error - you can look up descriptions and user feedback for specific EventID/Source combinations at www.eventid.net

I found an "old" print-out with following in it.
TIME-------EVENT-------INTRUDER-------COUNT. UNDER these headers are: TIME (9/28/2003__3:11:19 A (U or T)(C-or- D)P.
Probe_Other;SSRP SLAMMER and many others! To me, this sounde intrusive and possibly highly illegal!

INTRUDER_(One Each) c-24-1158-197-52.mn.cli; OEMCOMPUTER; syr-24-59-49-90-twcny.c??; Others are:SSRP_SLAMMER. Finally,is the "Count", i.e. 1- as high as 46!!

Can you replace the system log or import a saved copy of it??

Thanks

I have 2 users with laptops that when their event logs fill up will not allow them to log back on until an administrator (me) logs in and clears them. Can you help me figure out how to fix this?
Thanks Leo!

In eventviewer, right click on the log that's filling up, hit "Properties" and then change the "Log Size" parameter to overwrite as needed.

dear sir i am using win2003 server , i am no able to open windows eventviwer.what is the problem while i was logged on administrator eerror showing on the windows desktop.plz solve this problem..
with regards.
k.shivaprakash

Hello Sir,
I am very much interested in knowing more about event viewer and troubleshooting. Could you please guide me and refer some links about this.

Thanks & regards,

J Anthony Vincent.

Hi,

I have noticed that my applicatio event log on Windows xp sp2 only goes back to 2-16-06. the current date is 6-6-06. Is theres something wrong with my MMC console where the application event logs are not being logged anymore?

Thanks,
james

My event viewer is filling up with print job information IE: everything someone prints an event is displayed in the event viewer anyway of stopping this as it fills up to max size everyday

To post a comment on "What is the Event Viewer, and should I care?", please return to that article's main page.