Event log replication is enabled
[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at https://go.microsoft.com/fwlink/?linkid=34707.]
Topic Last Modified: 2005-11-18
The Microsoft® Exchange Server Analyzer Tool reads the following registry entry on each server that is a node of a cluster:
HKEY_LOCAL_MACHINE\Cluster\Nodes\X\EnableEventLogReplication
Note
X is the number of the node, starting with 1.
If the Exchange Server Analyzer finds that the value for EnableEventLogReplication is 1, the Exchange Server Analyzer displays a best practice message.
If the EnableEventLogReplication registry entry is set to 1, the cluster node replicates events in the event log to all other nodes in the cluster. If event log replication is enabled, tools that monitor multiple servers, such as Microsoft Operations Manager (MOM), report a single event multiple times, one time from each node. If you use automated monitoring, it is recommended that you disable event log replication on cluster nodes.
To disable event log replication on all nodes of a cluster
Log on to any node of the cluster with an account that is a domain user account or a member of a global group.
Click Start, click Run, and then type
cluster /prop EnableEventLogReplication=0
To disable event log replication on a single cluster node
Log on to any node of the cluster with an account that is a domain user account or a member of a global group.
Click Start, click Run, and then type
Cluster <name of node to disable> /prop EnableEventLogReplication=0
For more information about how to configure event log replication, see the Microsoft Knowledge Base article 224969, "HOW TO: Configure Event Log Replication in Windows 2000 Cluster Servers" (https://go.microsoft.com/fwlink/?LinkId=3052&kbid=224969).
For more information about administering server clusters, see Administering Server Clusters (https://go.microsoft.com/fwlink/?LinkId=45971).