Archived from groups: microsoft.public.win2000.security (More info?)
I dump our domain controller security event logs to a remote clustered
file server, in the form of .evt files, several times per day, as we
have auditing turned up domain wide. But when I run EventComb, I find
I can only select about 3 files without error to search at a time,
otherwise I'll get the following errors for all of the files I have
selected after the first 3:
First error:
"Security Log on ServerName_Date.evt was not available. GetLastError
was 8. Error text was: Not enough storage is available to process this
command."
Followed immediately by:
"Security Log on ServerName_Date.evt not available. GetLastError was
131. Error text was: Not enough storage is available to process this
command."
I have experimented with changing the default threads from 25 down to 5
or 10, but this doesn't seem to help. I thought perhaps it was due to
insufficient RAM, but I recently upgraded to 1.5GB or RAM, and with
1.2GB free, and the errors still continue. The eventcomb server is a
Compaq DL360 with dual 2.4GHz Xeon processors, running Windows 2000
Server SP4. There is nothing else running on this server.
Has anyone else encountered this, or have a suggestion?
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.