event log full

[Basha]

Hi all,
I saw in some systems the event log gets full with in hours and the system
will shutdown/logoff, and prompt to logon as administrator and clear event
logs.
if you loged in as normal user the system will not allow you logon.
How can one can stop log events to be full.
Give me reply please.
Basha

 

[Mark]

RE: event log full

You can go into Eventvwr and set the Properties of the logs to delete the
oldest events as needed to keep them under control.

"Basha" wrote:

> Hi all,
> I saw in some systems the event log gets full with in hours and the system
> will shutdown/logoff, and prompt to logon as administrator and clear event
> logs.
> if you loged in as normal user the system will not allow you logon.
> How can one can stop log events to be full.
> Give me reply please.
> Basha

 

[Peter]

Re: event log full

Basha wrote:

> Hi all,
> I saw in some systems the event log gets full with in hours and the system
> will shutdown/logoff, and prompt to logon as administrator and clear event
> logs.
> if you loged in as normal user the system will not allow you logon.
> How can one can stop log events to be full.
> Give me reply please.
> Basha

1. Determine if there is a problem that is creating excessive log entries
and is filling the log file. If so, fix the problem.

2. Increase the size of the log file to be able to handle several days/weeks
worth of logs. Right click the log in Event Viewer and choose Properties.
Here you can set the log file size.

3. Set a policy for what to do when the log file is full. On the same
Property page that you set the log file size, enable "circular logging" by
choosing to overwrite the logfile entries older than a period of days or
choose to overwrite as needed.

http://technet2.microsoft.com/windo...a482-4040-8f28-1280d5ddd2d51033.mspx?mfr=true


HTH

Peter

 

[Lanwench [MVP - Exchange]]

Re: event log full

Basha <Basha@discussions.microsoft.com> wrote:
> Hi all,
> I saw in some systems the event log gets full with in hours and the
> system will shutdown/logoff, and prompt to logon as administrator and
> clear event logs.
> if you loged in as normal user the system will not allow you logon.
> How can one can stop log events to be full.
> Give me reply please.
> Basha

In addition to the other replies - set them all to a decent size (minimum
20MB) and "overwrite as needed"