Head scratcher on Event Viewer

2000 Server DC controler

Open even viewer and nobody is home. But it shows thousands of entries in the header. When you click on each catigory in the left pane the header goes to zero it wont return till you close even viewer and re open.

See screenshot attached.

 

Ok. thats odd.
Can you save the evts and open them on another machine? (wondering if there is something weird registered as an event log parser. never seen that cause a problem before though).

If you run an mps reports, it has a tool that extracts event logs. does that work?
http://www.microsoft.com/downloads/...7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en

 

Good call Joe.
I ran the report and Event viewer showed empty .evt files just like the origionals.
I was able to open the .evt file on another machine so it must be the viewer that's the problem.
How do I fix it?

Thanks Joe.

 

Possibly running into this:

825783 Large log files may not be displayed in Event Viewer
http://support.microsoft.com/?id=825783

I was worried you had corrupted EVTs. since they open fine on another machine, thats not it. I'm hoping that article is your problem, because im not sure what else it could be...

I guess its possible some DLLs need reregistration. Any other MMCs acting up?

 

Yes as a matter of fact the pop3 connector in Exchange (SBS 2000) does the same thing.

You may have found a trend because I had to repair Add and Remove Programs about a year ago.

 

your app and system event logs are corrupt. the DLLs are working fine, (if you connect to another machine from event viewer, they display ok; or open the MMC and add the event snap in, and go directly to the FRS log without clicking on app or system).

I recommend you archive the EVTs you have and whack the existing files by following this KB article http://support.microsoft.com/default.aspx?scid=kb;EN-US;172156


Im suprised that the event viewer wasnt crashing. Very odd buisiness. Try the above and report back.