EventComb problem
jacksneed2000_at_yahoo.com
Date: 08/26/05
- Next message: Ricardo Jimenez: "PATCHES PROBLEM"
- Previous message: Henry Chang: "Network Connections service cannot be started"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 26 Aug 2005 07:07:46 -0700
I dump our domain controller security event logs to a remote clustered
file server, in the form of .evt files, several times per day, as we
have auditing turned up domain wide. But when I run EventComb, I find
I can only select about 3 files without error to search at a time,
otherwise I'll get the following errors for all of the files I have
selected after the first 3:
First error:
"Security Log on ServerName_Date.evt was not available. GetLastError
was 8. Error text was: Not enough storage is available to process this
command."
Followed immediately by:
"Security Log on ServerName_Date.evt not available. GetLastError was
131. Error text was: Not enough storage is available to process this
command."
I have experimented with changing the default threads from 25 down to 5
or 10, but this doesn't seem to help. I thought perhaps it was due to
insufficient RAM, but I recently upgraded to 1.5GB or RAM, and with
1.2GB free, and the errors still continue. The eventcomb server is a
Compaq DL360 with dual 2.4GHz Xeon processors, running Windows 2000
Server SP4. There is nothing else running on this server.
Has anyone else encountered this, or have a suggestion?
- Next message: Ricardo Jimenez: "PATCHES PROBLEM"
- Previous message: Henry Chang: "Network Connections service cannot be started"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
