Re: Eventlog cannot set filter - log too big

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/23/05 

Date: Wed, 23 Feb 2005 00:48:27 -0600

Try using Event Comb to see if you have any better luck. It is a much better
way to go through the security logs anyway. The links below tell more and
show where to download it from. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308471
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

"Jeremy Sun" <binmann@hotmail.com> wrote in message
news:eWcTEHXGFHA.1068@TK2MSFTNGP14.phx.gbl...
> Everytime when I tried to set filter one of the logs for display, it
> returns
> a message something like "Events has been modified, start again?" If you
> start again, you wait for another few seconds before the message pop up
> again. If you click on No, it just shows you an empty page.
>
> Well, I think it is because the big log that I have, 20MB each.
>
> Anything I can do so that I don't need to manually scan through the logs
> looking up a possible entry.
>
> I can't export the events to text, it takes forever.
>
> Regards,
> Jeremy
>
>

Relevant Pages

  • Re: Eventlog cannot set filter - log too big
    ... > Try using Event Comb to see if you have any better luck. ... > way to go through the security logs anyway. ...
    (microsoft.public.win2000.security)
  • Re: Event ID 577 & 578 are filling Security Event Logs
    ... Event Comb from Microsoft may make searching security logs easier for ...
    (microsoft.public.win2000.security)
  • Re: Auditing Successful Logins
    ... You can not audit selectively for account logon or logon events. ... are sorted by time and you can use tools like Event Comb to make searching ... through the security logs much easier. ...
    (microsoft.public.win2000.security)
  • Re: unaccesible system event log
    ... Sophos EM Library is one part of antivirus solution for distributing ... I have no access to server now, so I can't answer exactly your questions ... about security logs ... And what do you see in the security logs (is auditing turned up so you get ...
    (microsoft.public.windows.server.active_directory)
  • Re: The security log on this system is full
    ... Even I clear the event security logs, the error disappears during some days ... I wouldn't set to ''1'' because it will crash my server. ...
    (microsoft.public.security)