How to remove data in the Event Viewer log

Similar Questions

• How to solve problems using the event viewr log?

  Hello guys,.

  Can someone tell me how to use the event viewr log and resolve the problems or errors?

  I can solve the problems by myself, but do not know as the use of the display of event logs and information.

  Kind regards

  Claude of RAM

  Notes on the use of Event Viewer:
  http://www.gerryscomputertips.co.UK/syserrors5.htm

• effect of pump or etl data on the materialized view logs

  Hi, we are mobile/upgrading an instance of 10g to 12 c, where one materialized view logs and expect to do one of the following:

  (1) extract/import the meta, only using data pump data and move data using an etl tool

  (2) comprehensive database extract/import using the data pump in

  are there questions that we must be aware of when the displacement of these with either scenario materialized view logs?

  Thanks for any information you can provide.

  > are there questions that we should be aware of when the displacement of these materialized view logs with either scenario?

  No problem

• How can access data in the rman 'daily.log' output file

  Hi all
  
  I used the following question for rman out
  the output file "daily.log" has been created, but there is no data.
  
  How can access the data in the output file 'daily.log '.
  
  
  bash-3. $00 sh rmant.sh
  
  Recovery Manager: release 10.2.0.3.0 - Production Thu Jun 30 16:54:16 2011
  
  Copyright (c) 1982, 2005, Oracle. All rights reserved.
  
  connected to target database: DEV (DBID = 45558086)
  
  RMAN > Journal of coil to daily.log;
  2 > run
  3 > {}
  4 > backup databas.
  {5 >}
  6 > spool log off;
  7 >
  Winding began in the log file: daily.log
  
  Recovery Manager10.2.0.3.0
  
  From backup 30 June 11
  using the control file of the target instead of recovery catalog database
  allocated channel: ORA_DISK_1
  channel ORA_DISK_1: sid = 634 devtype = DISK
  channel ORA_DISK_1: additional start-up compressed 0 datafile backupset
  channel ORA_DISK_1: specifying datafile (s) in backupset
  input datafile fno = name=/u02/proddata/a_int01.dbf 00014
  input datafile fno = name=/u02/proddata/a_txn_data01.dbf 00022
  input datafile fno = name=/u02/proddata/a_txn_data02.dbf 00023
  input datafile fno = name=/u02/proddata/a_txn_data03.dbf 00024
  input datafile fno = name=/u02/proddata/a_txn_data04.dbf 00039
  input datafile fno = name=/u02/proddata/undo02.dbf 00038
  input datafile fno = name=/u02/proddata/a_txn_ind03.dbf 00027
  input datafile fno = name=/u02/proddata/a_txn_ind04.dbf 00028
  input datafile fno = name=/u02/proddata/undo01.dbf 00012
  input datafile fno = name=/u02/proddata/a_media01.dbf 00015
  input datafile fno = name=/u02/proddata/a_txn_ind01.dbf 00025
  input datafile fno = name=/u02/proddata/a_txn_ind02.dbf 00026
  input datafile fno = name=/u02/proddata/a_txn_ind05.dbf 00029
  input datafile fno = name=/u02/proddata/a_summ01.dbf 00021
  input datafile fno = name=/u02/proddata/a_ref01.dbf 00019
  input datafile fno = name=/u02/proddata/a_ref02.dbf 00020
  input datafile fno = 00001 name=/u02/proddata/system01.dbf
  input datafile fno = name=/u02/proddata/system02.dbf 00002
  input datafile fno = name=/u02/proddata/system03.dbf 00003
  input datafile fno = name=/u02/proddata/system04.dbf 00004
  input datafile fno = 00005 name=/u02/proddata/system05.dbf
  input datafile fno = name=/u02/proddata/system06.dbf 00006
  input datafile fno = name=/u02/proddata/system07.dbf 00007
  input datafile fno = name=/u02/proddata/system08.dbf 00008
  input datafile fno = name=/u02/proddata/system09.dbf 00009
  input datafile fno = name=/u02/proddata/system10.dbf 00010
  input datafile fno = name=/u02/proddata/system11.dbf 00011
  input datafile fno = name=/u02/proddata/a_archive01.dbf 00013
  input datafile fno = name=/u02/proddata/sysaux01.dbf 00036
  input datafile fno = name=/u02/proddata/a_nolog01.dbf 00016
  input datafile fno = name=/u02/proddata/izu01.dbf 00037
  input datafile fno = name=/u02/proddata/a_queue01.dbf 00017
  input datafile fno = name=/u02/proddata/a_queue02.dbf 00018
  input datafile fno = name=/u02/proddata/odm.dbf 00031
  input datafile fno = name=/u02/proddata/portal01.dbf 00034
  input datafile fno = name=/u02/proddata/sfx01.dbf 00035
  input datafile fno = name=/u02/proddata/ctxd01.dbf 00030
  input datafile fno = name=/u02/proddata/olap.dbf 00032
  input datafile fno = name=/u02/proddata/owad01.dbf 00033
  channel ORA_DISK_1: starting total, 1 to June 30, 11
  channel ORA_DISK_1: finished piece 1 at June 30, 11
  total, handle = / sw/weekly_cum_database_DEV_t755196858_c1_s24_p1 tag = WEEKLY_CUM_DAT
  ABASE comment = NONE
  channel ORA_DISK_1: complete set of backups, time: 00:32:55
  channel ORA_DISK_1: additional start-up compressed 0 datafile backupset
  channel ORA_DISK_1: specifying datafile (s) in backupset
  including the current control in backupset file
  including current SPFILE in backupset
  channel ORA_DISK_1: starting total, 1 to June 30, 11
  channel ORA_DISK_1: finished piece 1 at June 30, 11
  total, handle = / sw/weekly_cum_database_DEV_t755198834_c1_s25_p1 tag = WEEKLY_CUM_DAT
  ABASE comment = NONE
  channel ORA_DISK_1: complete set of backups, time: 00:00:02
  Backup completed on June 30, 11
  
  Queue log disabled
  
  Recovery Manager10.2.0.3.0
  
  Complete recovery manager.
  bash-3. $ 00

  No need to mention to the coil of logoff.

  coil disconnection;

  out this above command and run again.

• Question about consistent errors in the event viewer XP Home Edition

  I ran a program called VEW looking errors up to twenty in the XP Event Viewer.

  Here is the data for the analysis of files:

  V01c Vino event viewer run on Windows XP in English
  Report run at 28/01/2012 23:42:23

  Note: All dates below are in the format dd/mm/yyyy

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  "System" Log - error Type
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Journal: "System" Date/time: 01/28/2012 22:48:06
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 01/28/2012 22:47:40
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 01/28/2012 22:35:31
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 27/01/2012-22:49:54
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 27/01/2012-22:37:21
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 27/01/2012-14:32:57
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 27/01/2012 03:38:23
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 25/01/2012-13:53:36
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 25/01/2012-13:32:34
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012 23:35:59
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 24/01/2012 23:21:10
  Type: error category: 0
  Event: 29 Source: W32Time
  The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible.  No attempt to contact a source will be for 14 minutes. NtpClient has no source of accurate time.

  Journal: "System" Date/time: 24/01/2012 23:21:10
  Type: error category: 0
  Event: 17 Source: W32Time
  Time provider NtpClient: an error has occurred during the DNS lookup of the manually configured peer 'time.nist.gov, 0x1 '. NtpClient will try the DNS lookup in 15 minutes. The error was: a socket operation was attempted to an unreachable host. (0 x 80072751)

  Journal: "System" Date/time: 24/01/2012 23:18:36
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012 02:15:46
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012-12:58:29 AM
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: "System" Date/time: 24/01/2012 00 h delighteth
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: 'System' time: 23/01/2012 23:26:32
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: 'System' time: 23/01/2012 23:26:19
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: 'System' time: 23/01/2012 23:02:41
  Type: error category: 0
  Event: 10005 Source: DCOM
  DCOM got error "% 1058" try to start the service NMIndexingService with arguments "" to start the server: {E8933C4B-2C90-4A04-A677-E958D9509F1A}

  Journal: 'System' time: 23/01/2012 18:28:49
  Type: error category: 0
  Event: 7023 Source: Service Control Manager
  Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: a device attached to the system is not functioning.

  Journal: "System" Date/time: 24/01/2012 23:35:59

  Parameters of scanning has been:

  • System
  • Errors
  • 1-20 errors, valued at twenty.

  What are these errors and they are nothing to worry about?

  I have Nero 8 on this system and have an updated hosts file the running here: http://winhelp2002.mvps.org/hosts.htm

  Not sure, but I may have changed a network setting to activate the new hosts file work properly.

  Seen these errors for a while. system works well and smoothly.  No symptoms of malware or infection seen or found.  I would call these software errors as they seem does not affect the operation of the system.

  XP Home Edition SP3 P4 2.8 2 GB RAM

  Joe

  Oh yes :)

  I have never used the program VEW and don't think I will check it - I just look at the Event Viewer logs the old-fashioned way (manually) if I think that there is a problem, but that might just be the old me.

  It is true that XP Home doesn't have Group Policy Editor, but all policy settings are always available via the registry.

  Some malware will change your GP settings and cause problems.

  I have a little import registry will correct all the ones I know, so if someone has these symptoms, any flavor of XP, they are running, I'll just send the script because sometimes you will be not able to solve the problem, even if you have not the GP Editor.

  The registry always import work - and work well for XP Home or XP Pro.  If you have the symptoms and XP Home, what would you?   Start the import operation of the registry.

  If you're curious, off on my SkyDrive it is a spreadsheet Excel (Group Policy settings) who has all the parameters of GP and where they are in the registry.  I do not recommend start searching, but it is useful to know where things are if there is a problem.

  I would not allow the connection of a security XP stuff unless you think you're being attacked.  More and verbose logging slows things down.  My Event Viewer Security log is empty.

  Find the links to the Microsoft Support Engineer for the most part useless to actually solve a problem (because it help you with your problem), if someone has a question or point of Event Viewer, I usually just send them this:

  To view the logs in Event Viewer, click Start, settings, Control Panel, administrative tools, event viewer.

  A shortcut to the event viewer is to click on start, run and enter in the box:

  %SystemRoot%\system32\eventvwr.msc

  Click OK to launch the event viewer.

  The most interesting newspapers are usually the system and Application logs.

  Some newspapers such as security and Internet Explorer may be completely empty or have just a few items.  The default settings for XP wants do not connect all this activity, unless you need to solve a problem in these areas.  If you enable logging for them the papers fill up quickly and could adversely affect the performance of your system with all the extras (often unnecessary) activity.

  If you have Microsoft Office installed, it has its own newspapers, and they can be empty or occasional boring activity very little or, if there is no problem with your desktop applications.  It's normal.

  Not every event is a problem, some are informational messages that things work very well, and some are warnings.

  However, no event should defy reasonable explanation.

  Each event is sorted by Date and time.  Errors will be red Xs, warnings will have yellow! s.
  Informational messages have white is.  Not every error or warning event means that there is a serious question.

  Some are excusable at boot time when Windows starts.  Try to find only the events to the date and time around your problem.

  If you double-click on an event, it will open a window of properties with more information.  On the right are black up and down arrow keys to scroll through the open events. The third button that looks like two overlapping pages is used to copy the details of the event in your Windows Clipboard.

  When you find an interesting event that occurred at the time of your question, click on the third button at the top and arrows to copy the details and then you can paste the details (right click, paste or CTRL-V) the text in detail here for analysis.  Remove all personal information from your information after you paste If you are forced to do so.

  If you paste an event, it will look something like this annoying system startup event:

  Event type: Information
  Event source: Service Control Manager
  Event category: no
  Event ID: 7035
  Date: 14/07/2010
  Time: 17:54:18
  User: Jose
  Computer: computer

  Description:
  The Remote Access Connection Manager service was sent successfully a starting control.

  To get a fresh start on any log of the event viewer, you can choose to clear the log (the log backup is available), and then reproduce your problem, then just look at the events around your show and troubleshoot events that are happening when you have your question.

  You can search for events on the World Wide Web and get ideas.  It's where people events they see and then to the top of their questions, ideas and solutions:

  http://www.EventID.NET/

  If you find your event in the discussion, the first idea or discussion does not necessarily mean it is the "answer" to your situation, so read through all the ideas to find the one that sounds more like your situation.

• Why don't the Event Viewer won't allow me to activate the hardware event logging?

  I have a computer that is running Windows 7 Professional. When I look at the event viewer, logging well seems to work for most of the nodes. However, for the two important knots in the Applications and Services logs, in particular, hardware and Internet Explorer events, the Actions pane doesn't have a control to enable logging and the Properties dialog box for this feature is grayed out, inactive. How can I activate these two newspapers?

  John

  Material events:
  http://msdn.Microsoft.com/en-us/library/Windows/desktop/bb736532 (v = vs. 85) .aspx

  Probably, your system does not meet these requirements.

• How can I remove selected Custom view (s) of the event viewer Console tree?

  I looked at the MMC Help on create and manage custom views.

  I can't find a way to remove the custom filter views in the Console tree, which can be found on the left side of the event viewer.

  How can I remove selected Custom view (s) when they serve no more values?

  Problem solved

  I asked this question because I was unable to see what was going on in the event viewer and I couldn't find help in mmc HTML Help. However, now I see what's happening and I can give you a solution to my own question.

  Cause

  If I connect to the computer as a user with administrator privileges, I am able to use the event viewer to create a custom view filter that can be used by all users who have access to the event viewer. If I fix remove a view filter custom Console tree, I can't delete it unless I'm logged in as the user who created it.

  Solution

  1. Log the computer as the user who created the custom view.
  2. Start Event Viewer
  3. Use the right-click of the mouse on a custom view filter selected in the Console tree, open the drop down menu.
  4. Delete appears fourth in the bottom of the menu if and only if you are logged on as the user who created this view.
  5. Select Remove to remove the filter to custom view.

  If Delete does not appear in the drop-down menu, then it may not possible you connect as the user who created the custom view.

• How to fix a client SSL key private credential error code in the event viewer

  Hi people,

  I hope someone can help. I am currently using Windows 7 Professional 64 bit, updated with the latest updates from Microsoft.

  I get the following error message, ()every 5 minutes exactly) in the Event Viewer administrative, computer management.

  "A fatal error has occurred when trying to access the private key SSL client credential." The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10003 "

  It began on October 14, 2014. There are now more than 40,000 of the codes of this edition.

  A sample of the log data is as follows;

  Log name: System
  Source: Schannel
  Date: 18/10/2014-20:54:40
  Event ID: 36870
  Task category: no
  Level: error
  Keywords:
  User: SYSTEM
  Computer: AP1
  Description:
  A fatal error occurred when attempting to access the private key SSL client credential. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10003.
  The event XML:
  
   
     
      36870
      0
      2
      0
      0
      0 x 8000000000000000
     
      133003
     
     
      System
      AP1
     
   
   
      customer
      0x8009030d
      10003
   
  

  I looked at all the suggestions online and have found nothing of what is specific to this problem for windows 7 and how to solve it. I would be grateful if someone could guide me in the way to solve the problem.

  Thanks in advance.

  Tom

  Dear Isha,

  Thanks for your follow-up. After spending considerable time on the issue, I stopped just by using the function of collective housing, which heals many error codes. It is redundant to a standard network configuration and is not worthwhile. Since Windows 10 deletes the function of group living, I'm not sure that I need to spend time on this...

  I have also had also removed the bad machine key and senior partners of information in the directory of network of peers, which seems to have solved the problem.

  Thanks for your thoughts.

  Tom

• How to remove bad Event Viewer logs?

  I have a lot of newspapers uncomepleted like google earth when the download is comepleted he'll say something wrong when you download try again and every time I do alright on your Observer newspaper events and as a warning I not his mess up my computer thats why im tryin to c, if I can remove warnings , what will happen, thank you

  * original title - can u remove the wrong logs in Event Viewer that is alert *.

  Hi jb1961,

  One entry warning, error or information in your event log do not "mess up your computer", but it takes place and so continually underway, makes it harder to see the other topics.  So also fills the space of Event Viewer so that the replacement of the older entries occurs earlier than she is otherwise perhaps - but in general there is a lot of space so fixed at default levels.  Incomplete newspapers in the example you used are also too much space, but it's better another question, addressed through the support of Google Earth web site or forums.

  You cannot remove specific entries from logs in the event viewer, but you can filter the events.  As I don't know what OS you use, I'll provide procedures for XP, Vista and W7.

  For XP: http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nt_filteringevents_how_ev.mspx?mfr=true.

  For Vista and W7: http://technet.microsoft.com/en-us/library/cc722058.aspx.

  *****************************************************

  To completely clear the event logs, follow these instructions (but it's the whole journal, not only an entry application or event - so I don't think that's what you want): http://www.ehow.com/how_5886147_delete-entries-windows-event-log.html.

  How to delete a specific entry from the event logs: http://www.ehow.com/how_6039004_remove-entry-event-viewer.html.  NOTE: I am note quite sure this removes only the entries that were held (does so must it be restored) or prevents also any future entries like this - so be careful before to do this and make sure that you are aware of the possible consequences (see again this entry).  A possible workaround might be to first copy the entry elsewhere, delete it the registry then, restore the entry in the registry and who can delete past events but allowed future events always appear (or it can restore once restored previous events and so unnecessary - I am not sure).  Before you do, if you do, don't forget to back up the registry (the section you are working on the use: the entire thing using http://windowsxp.mvps.org/registry.htmor http://support.microsoft.com/kb/136393 ) and I would also create a system restore point just to be safe.  , But before I did (which I think is unnecessary and just a little risky), I would use the above filter process.

  pe I hoit helps.

  Good luck!

• The Event Viewer error on startup: "the scheduled task of CARPET met a failure during configuration data collection. HR = 0xC004F00E.

  I use Windows XP with AMD processor clocked at 1.6 Ghz and 2 GB of RAM. This error appears in the event viewer whenever my computer starts. I don't know if it's doing any harm. can someone advise?

  original title: the scheduled task of CARPET met a failure during configuration data collection. HR = 0xC004F00E

  Hello Steven,

  Did you ever receive notifications that a virus or malware has been removed from your system recently?
  My only thought is that it is the remains of an infection on your machine.
  It is most likely harmless, but I don't understand why you'd be concerned.
  Do you have any task scheduled to run at startup using Task Scheduler built into Windows?
  http://support.Microsoft.com/kb/308569
  I would check to see if there are tasks to run at startup:
  http://www.Microsoft.com/resources/documentation/Windows/XP/all/proddocs/en-us/sag_tsconcepts03.mspx?mfr=true

• Message in the event viewer running XP Pro with SP3 get following: 7026 ID: start system or boot start drivers following could not load: nvatabus nvraid. How can I fix it?

  Get the following in the Event Viewer error message have had this message for quite some time

  ID 7026: boot start or system start following

  driver (s) failed to load: nvatabus nvraid. How do I

  This difficulty?  I am running XP Pro SP3. Would appreciate any help in this matter.

  Hello

  · What is the number and the model of the computer?

  · Remember the recent changes on the previous computer o the question?

  The problem is related to the display driver installed on the computer.

  Check the status of the card/video display adapter installed on your computer.

  a. click on start

  b. click Run, in the Run dialog box type devmgmt.msc

  (c) in the Device Manager window, look for the screen reader and expand the drive, double-click the sub element to check if an error message or error code is listed.

  See the links below: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=7026&EvtSrc=Service+Control+Manager&LCID=1033

  How to manage devices in Windows XP: http://support.microsoft.com/kb/283658

• How to clear the administrative events - Event Viewer log

  Hello:

  Anyone know how to clear the administrative events log listed under custom in the event viewer views?

  All the logs listed in Windows logs do not have options to clear, but the back above.

  Thank you

  ColTom2

  Hey Colonel,

  It is because this isn't 'really' a newspaper, in itself.
  This is a Search of the newspaper (and there is MUCH more that most people know), filtered to show all events in administrative type.
  The source column shows you which newspaper it came from originally.

  To get rid of them, you will need to erase all records.

  If you want to get an idea:
  Go down to the Applications and Services logs, and expand.
  Microsoft, expand it.
  Then Windows.

  Nice list?
  You need to open and delete all. To really delete it.
  VP Tech Services

• How to permanently remove it from the event log in the CSA MC

  I run the Cisco Secure Agent 4 deployed on 4 PCs I have enabled documented logging just because it's a test environment & I wanted to see how many events it would generate. Well, last I checked CSA MC (under summary of events) it has more than 300,000 (it's just 300 000) events recorded. I have modified the event handler and applied the new rules, but the machine™ is slooooow both because of more than 300,000 events. Please see the screenshot joint. How do I permanently purge the event log. I used the purge within the CSA MC command but it removed only 10,000 events. The machine is slow so that I can do nothing about it.

  Well, I wanted to send the screenshot, but the machine is slow I can't even attach the file. But in all cases, the problem is that the window summary displays message of more than 300,000 events & I need for permannently remove events.

  Thank you.

  Was the only one I know how is to use "events" and click all events. From there, you can click or purge the events of your choice.

  Also, what are the specifications of server you use?

  I have been involved with MCs with more than 2 x what you have & this server is satisfactory product.

  Hope this helps,

  Peter

• How to change the ID of 'security' other than 'NULL SID"in the"Event Viewer"on WinSrv2008

  Hello

  I'm working on the Windows Server 2008 system.

  I would like to be displayed in the event viewer ' ' the correct ID 'security' (it is always displayed as "SID NULL" instead of the right domain/username) for the logon task (event ID: 4624).

  For the task of the closing session, the security ID is displayed correctly.

  Thank you for your answers

  Hello

  The forum Microsoft Community are for consumer issues. Windows Server issues should be posted in the TechNet Windows Server forum, where they specialize in Windows Server.

  Thank you

  David

• My computer is slow and I checked the event viewer, and it says I have reached my limits of interruption of security.

  My computer is slow and I checked the event viewer, and it says I have reached my limits of interruption of security. I ran Netstat-no, but data flashed on the screen, but I can't freeze it at the screen to display the data. What keys down to hold the data on the screen to display it.
  Thank you, OTTO

  original title: interruption tcp/ip connect limits

  Hello

  Try the steps below and check if the problem persists.

  Step 1:

  Run the fix provided in the link below to reset TCP/IP and check if that helps.

  How to reset the Protocol Internet (TCP/IP)

  http://support.Microsoft.com/kb/299357

  Note:

  Step above contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:

  How to back up and restore the registry in Windows

  http://support.Microsoft.com/kb/322756

  Step 2:

  You can check the link provided below for more information on the use of Net command in Windows XP stat.

  Netstat

  http://www.Microsoft.com/resources/documentation/Windows/XP/all/proddocs/en-us/netstat.mspx?mfr=true