question

chandrasekarank-7349 avatar image
0 Votes"
chandrasekarank-7349 asked ·

Unable to log events to security log getting event ID 512 in all domain controller

Log Name: Security Source: Security Date: 2021-03-04 6:24:29 AM Event ID: 521 Task Category: System Event Level: Information Keywords: Classic,Audit Success User: SYSTEM Computer: system Description: Unable to log events to security log: Status code: 0x80000005 Value of CrashOnAuditFail: 0 Number of failed audits: 1 <Provider Name="Security" /> <EventID Qualifiers="0">521</EventID> <Level>0</Level> <Task>1</Task> <Keywords>0xa0000000000000</Keywords> <TimeCreated SystemTime="2021-03-04T13:24:29.000000000Z" /> <EventRecordID>200543</EventRecordID> <Channel>Security</Channel> <Computer>system</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data>0x80000005</Data> <Data>0</Data> <Data>1</Data> </EventData> </Event>

windows-active-directory
· 1
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
 
Just want to confirm the current situations.
If there's anything you'd like to know, don't hesitate to ask.

Best Regards,

0 Votes 0 ·

1 Answer

DSPatrick avatar image
0 Votes"
DSPatrick answered ·

Might try clearing the log or its also possible the ETVX is corrupt. In this case set the Event Log service startup to Disabled, reboot, delete corrupt EVTX from \Windows\System32\winevt\Logs then set the set the Event Log service startup to Automatic, reboot

--please don't forget to Accept as answer if the reply is helpful--







·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.