New
#1
Event ID 1 warning & Event ID 2 error
Hello,
After Fall Creators update I'm seeing 1 error and 1 warning in the Event Viewer which I'm not able to resolve.
Event ID 1
The backing-file for the real-time session "DefenderApiLogger" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.
Event ID 2Code:<System> <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" /> <EventID>1</EventID> <Version>0</Version> <Level>3</Level> <Task>1</Task> <Opcode>10</Opcode> <Keywords>0x8000000000000010</Keywords> <TimeCreated SystemTime="2017-10-19T23:02:23.884086800Z" /> <EventRecordID>26</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="136" /> <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel> <Computer>PC</Computer> <Security UserID="S-1-5-18" /> </System> - <EventData> <Data Name="SessionName">DefenderApiLogger</Data> <Data Name="ErrorCode">3221225864</Data> <Data Name="LoggingMode">411042176</Data> </EventData>
Session "" failed to start with the following error: 0xC0000022
I think it is fixable, but don't know where to start. Does anyone have some idea?Code:<System> <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" /> <EventID>2</EventID> <Version>0</Version> <Level>2</Level> <Task>2</Task> <Opcode>12</Opcode> <Keywords>0x8000000000000010</Keywords> <TimeCreated SystemTime="2017-10-19T23:02:24.643823700Z" /> <EventRecordID>27</EventRecordID> <Correlation /> <Execution ProcessID="1536" ThreadID="2096" /> <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel> <Computer>PC</Computer> <Security UserID="S-1-5-20" /> </System> - <EventData> <Data Name="SessionName" /> <Data Name="FileName" /> <Data Name="ErrorCode">3221225506</Data> <Data Name="LoggingMode">293609474</Data> </EventData>
Thank you in advance.