Jump to content


Photo

Event ID 6141

Event Log

  • Please log in to reply
1 reply to this topic

#1 snesterCES

snesterCES

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 26 June 2019 - 02:49 PM

I'm getting an error running a report on a File Server's share.  It seemed to be running fine, other than an occasional issue where the File Server service needed to be started manually.

 

However, now, it won't run and gives this error:  

 

Could not locate the end of the event log for 'fileserver.domain.local'. The event log might have been overwritten.

 

I'm not sure what the problem is, why it would suddenly appear (no changes on the server), and what to do about it.  Pretty sure I have the max file size set to 4 GB.



#2 Kirill K

Kirill K

    Advanced Member

  • Administrators
  • PipPipPip
  • 107 posts
  • Gender:Male

Posted 26 June 2019 - 05:32 PM

Hi there,

 

The security event log is overwritten, this causes the data collection which includes snapshot update, it might take pretty much time depending on the total number of file objects located across the audited shared folder(s).

 

You should calculate the statistic of security event log and figure out what event id takes most part of security event log, what type of access who performs the access.

 

By the way what type(s) of access you have configured to collect from?


Best regards,
Forum Engineer
 





0 user(s) are reading this topic

0 members, guests, anonymous users