Trouble with "Homegroup Log"
I've been receiving the following event log error on my Win7 Ultimate (x64) box that is part of a small Homegroup:
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 4/28/2010 6:45:37 PM
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: RADAR
Description:
Session "Homegroup Log" failed to start with the following error: 0xC0000035
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2010-04-28T23:45:37.205000000Z" />
<EventRecordID>579</EventRecordID>
<Correlation />
<Execution ProcessID="1336" ThreadID="6900" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>RADAR</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Homegroup Log</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225525</Data>
<Data Name="LoggingMode">285212677</Data>
</EventData>
</Event>
I'm now getting:
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 4/28/2010 10:21:23 PM
Event ID: 4
Task Category: Logging
Level: Warning
Keywords: Session
User: SYSTEM
Computer: RADAR
Description:
The maximum file size for session "Homegroup Log" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\Logs\Homegroup\homegrouplog.etl". The maximum files size is currently set to 5242880 bytes.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>10</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2010-04-29T03:21:23.611000000Z" />
<EventRecordID>580</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="4572" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>RADAR</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Homegroup Log</Data>
<Data Name="FileName">C:\Windows\Logs\Homegroup\homegrouplog.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">285212677</Data>
<Data Name="MaxFileSize">5242880</Data>
</EventData>
</Event>
and:
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 4/28/2010 10:21:23 PM
Event ID: 3
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: RADAR
Description:
Session "Homegroup Log" stopped due to the following error: 0xC0000188
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>14</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2010-04-29T03:21:23.611000000Z" />
<EventRecordID>581</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="4572" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>RADAR</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Homegroup Log</Data>
<Data Name="FileName">C:\Windows\Logs\Homegroup\homegrouplog.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">285212677</Data>
</EventData>
</Event>
I've been unable to find any information on managing this log. I did find some posts saying that the first error is common and can be ignored because the service will retry the action until it is able to open the log.
How do I manage the size of this log? Is it possible to eliminate these errors?
Thanks,
Ray
April 29th, 2010 6:02pm
Hi,
Based on my research, the logging of these errors won’t affect the operation of your computer. This can be caused by service optimizing the computer. You can
visit the following KB:
Error: "Session "ReadyBoot" stopped due to the following error: 0xC0000188" in Windows 7
BTE,
I found some similar issues for your references:
Windows 7 and Emachine Windows-Kernel-EventTracing
errors
Event ID 2 error - Homegorup Log has failed to start
Best Regards
Dale
Free Windows Admin Tool Kit Click here and download it now
April 30th, 2010 5:20am