How to Fix Missing Events in the Event Log on Windows 10/11? - MiniTool

Solve the problem of missing Windows event viewer logs

Event Viewer is a very useful utility in Windows systems that records operations during execution of applications and processes. However, sometimes the event viewer may not work properly, resulting in some logs missing. This article will guide you through this problem.

Missing events in the event log

Each application or process running on the computer sends a notification to record its activity. Importantly, even the problematic program may send notifications to the event log before it is stopped, which provides a useful clue for troubleshooting.

However, you may find that events are missing in the event log in Windows 10/11 system, or that the Event Viewer does not display all events. Once this happens, you will miss a lot of important information, as the logs are very convenient when you need to check if the program is running as expected.

How to fix missing events in Windows 10/11 event log?

Method 1: Check whether the relevant program is running

The application may not run as expected, resulting in missing event viewer logs. If the program is running but the process is not triggered, the logs are not collected either. In this case, you can try updating the software or reinstalling it to check for improvements.

Method 2: Restart Windows event log service

If the Windows Event Log service is stopped, you may experience missing events in the event log. Therefore, you can check that the service is started. The operation steps are as follows:

Step 1. Press Win R to open the Run dialog box.

Step 2. Enter services.msc and press Enter .

Step 3. Scroll down in the list to locate the Windows Event Log and double-click it.

Step 4. If the service has stopped, click Start . If it is already running, stop it and restart it.

Step 5. Under the Dependencies tab, select Windows Event Collector and click OK to save the changes.

Method 3: Increase the event log size

If there are too many events logged, it is best to change the maximum log size to store the new log. The operation steps are as follows:

Step 1. Enter Event Viewer in the search bar and press Enter .

Step 2. Go to Event Viewer (Local) > Windows Logs > Applications .

Step 3. Right-click on the application and select Properties .

Step 4. Under the General tab, change the maximum log size and save the changes.

Method 4: Run the system file checker

Corrupted system files can also cause missing events in the event log. If this is the case, you can run System File Checker (SFC) to replace existing files with good copies. Please follow these steps:

Step 1. Enter cmd in the search bar to find the command prompt , right-click it and select Run as administrator .

Step 2. Enter sfc /scannow and press Enter .

Method 5: Change the processing method of event logs

When the maximum number of events is reached, the default mode for maintaining log size is to overwrite the oldest event and add new events. You can change to another mode by following the steps below:

Step 1. Start Event Viewer , right-click on the specific log and select Properties .

Step 2. Under the General tab, you can select three options:

• Overwrite events on demand (oldest events are preferred)
• Archives when the log is full, and events are not overwritten
• Not overwrite events (clear logs manually)

By trying the above method, you can effectively solve the problem of missing Windows Event Viewer logs. Remember to choose the right method according to your specific situation.

The above is the detailed content of How to Fix Missing Events in the Event Log on Windows 10/11? - MiniTool. For more information, please follow other related articles on the PHP Chinese website!