Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. When viewing event logs remotely from Windows XP or Windows Server 2003, source is missing on Application, System and Security logs

When viewing event logs remotely from Windows XP or Windows Server 2003, source is missing on Application, System and Security logs

Symptoms

When attempting to view remote Event Logs using Eventvwr.msc from Windows XP or Windows Server 2003 to a newer version of Windows, the event logs may not show the source of the events. This will occur if the target machine is Windows Vista, Windows 7, Windows Server 2008 or Windows Server 2008 R2. 

↑ Back to the top

Cause

Windows Vista and later use different API's to access event logs than previous versions of Windows.

↑ Back to the top

Resolution

The workaround for this issue is to use Windows Vista or newer to remotely view the event logs on any operating system which is Windows Vista or later. 

↑ Back to the top

More Information

For more information about viewing event logs, please refer to the following articles:

Vista/Win2k8 Event Log Changes #2: .evtx Format

http://www.eventlogblog.com/blog/2007/12/vistawin2k8-event-log-changes.html

 

967856 Best practice for viewing Windows XP and Windows Server 2003 event logs by using Windows Vista

http://support.microsoft.com/default.aspx?scid=kb;EN-US;967856

 

Connect to another computer in Event Viewer

http://technet.microsoft.com/en-us/library/cc786582.aspx

 

Work with Event Logs on a Remote Computer

http://technet.microsoft.com/en-us/library/cc766438.aspx

 

 

↑ Back to the top

Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 2446492
Revision : 1
Created on : 1/8/2017
Published on : 12/3/2010
Exists online : False
Views : 198