Windows 10 Event id 3 and 4 keeps coming back for different processes and files on windows 10

  • Thread starter Thread starter Raj Gera
  • Start date Start date
R

Raj Gera

Guest
Under the event viewer- Custom view- Administrative events, I keep getting event id 3 and 4

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Event ID: 4
Task Category: Logging
Level: Warning
Description:
The maximum file size for session "Circular Kernel Context Logger" has been reached. As a result, events might be lost (not logged) to file "C:\WINDOWS\system32\WDI\LogFiles\BootCKCL.etl". The maximum files size is currently set to 104857600 bytes.


Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Event ID: 3
Task Category: Session
Level: Error
Description:
Session "Circular Kernel Context Logger" stopped due to the following error: 0xC0000188

Under performance monitor- Data Collector Sets - Startup event trace sessions - I have already set the max file size to 200 MB for readyboot, That's where the event started from.

Then we got the event 3 and 4 for Airspace channel - I set the file size to 200 MB in Perfmon - EventLog-AirspaceChannel properties - Stop condition.

Under same location set the file size to 200 mb for Circular kernel Context logger.

So every time the file size is reached, it starts throwing events either for size or different process. The event just keeps coming back!!!

How do we completely fix the issue?

We are on Windows 10 1709 enterprise and all users get this event.

More...
 
Back
Top