Jobos Posted September 10, 2007 Posted September 10, 2007 Came into work this morning to find the security event log had stopped logging at 3:45 on Saturday morning. The other event logs were working correctly and I couldn’t see anything wrong in services either. Restarting the server fixed it but it begs the question why did it stop and is there a way to restart the event log without restarting the server?
Geoff Posted September 10, 2007 Posted September 10, 2007 I'd imagine because it was full. There are GPO settings to control the size of the log. There's more info on Technet.
Jobos Posted September 10, 2007 Author Posted September 10, 2007 No it's not full, far from it and it's set to overwrite as needed.
Geoff Posted September 10, 2007 Posted September 10, 2007 Logging is provided by the 'Event Log' service. If that falls over, then you get no logs.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now