Share via


Event Viewer not showing new events

Question

Monday, June 17, 2019 10:34 AM

Hello everyone,

I currently have an issue with the event viewer on several Windows 10 computers. All of the computers have been configured to "Archive the log when full, do not overwrite". Also, maximum log size was set to 20480KB and the path to save the logs is the default one.

However, each time when it reaches 20480 KB it will stop logging and doesn't archive the events. It will archive everything if I restart the "Windows Event Log" service or reboot the computer.

Most of these computers are using Windows 10 Enterprise build 1809 17763.437. I even updated one of the devices to the newest version, build 1903. But this didn't solve the problem.

Does anyone know if this is a bug or have a possible solution?

Kind regards,

Ramon

All replies (4)

Monday, June 17, 2019 1:55 PM

Appears to be a bug. 

https://social.technet.microsoft.com/Forums/windows/en-US/2570117d-537f-490d-a373-e5a347d1ce45/event-logs-archive-log-when-full


Monday, June 17, 2019 2:00 PM

Hi,

Thanks, I found that one aswell (after I made this post).

I was actually hoping someone might knew a manual solution or something :(

Kr

Ramon


Monday, June 17, 2019 2:42 PM

I tried adding local service to the folder permissions and traced it with process monitor on my 1903 test VM. Nothing. My Powershell looper script just keeps running. I don't see any ACCESS DENIED or references to files named archive. 


Monday, June 17, 2019 3:37 PM

I tried that aswel with the LOCAL Service user, but no luck. I am afraid we will just have to wait