EventComb problem

Forum Windows 2000/NT : Windows 2000/NT General Discussion - EventComb problem

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.win2000.security (More info?)

 

I dump our domain controller security event logs to a remote clustered
file server, in the form of .evt files, several times per day, as we
have auditing turned up domain wide. But when I run EventComb, I find
I can only select about 3 files without error to search at a time,
otherwise I'll get the following errors for all of the files I have
selected after the first 3:

First error:
"Security Log on ServerName_Date.evt was not available. GetLastError
was 8. Error text was: Not enough storage is available to process this
command."

Followed immediately by:
"Security Log on ServerName_Date.evt not available. GetLastError was
131. Error text was: Not enough storage is available to process this
command."

I have experimented with changing the default threads from 25 down to 5
or 10, but this doesn't seem to help. I thought perhaps it was due to
insufficient RAM, but I recently upgraded to 1.5GB or RAM, and with
1.2GB free, and the errors still continue. The eventcomb server is a
Compaq DL360 with dual 2.4GHz Xeon processors, running Windows 2000
Server SP4. There is nothing else running on this server.

Has anyone else encountered this, or have a suggestion?

Sponsored Links
Register or log in to remove.
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > EventComb problem
Go to:

There are 899 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them