Monday, January 25, 2010

Event Viewer System Event Log: The Event Log File is Corrupt

How To Delete Corrupt Event Logs


Event logs can get corrupt. In my case it was the systems log. Here's how you rectify the issue.
  1. Start the services console by going to Start--> Run--> type "services.msc" without quotes--> OK. Or, you can go to Control Panel-->Administrative Tools-->Services.
  2. After services console come up on the right pane locate "Event Log" service. Double click the Event Log service and go to "general" tab.
  3. On "startup type" you will see "automatic". From drop down menu, select "disabled" and click "OK".
  4. Restart the server.
  5. Go to %windir%\system32\config (%windir% refers to WINDOWS folder. Usually inside C: drive).
  6. Locate the corrupt event log (mine was SysEvent.Evt). Move it to a different location (perhaps desktop).
  7. Go to services console and located Event Log service. Double click it and change the "Startup Type:" to "Automatic". Click Ok.
  8. Start the Event Log service by clicking on "start" link on top left corner of right pane of services console.

Restart if need be. In my case, I didn't have to. Once verified that the event log is working, you can delete the corrupt file that was moved. Some people recommend changing the NIC to "full duplex" if the above technique does not work.

Also, see http://support.microsoft.com/default.aspx?scid=kb;en-us;172156 for reference.

No comments:

Post a Comment