Home All Groups Group Topic Archive Search About

Exchange corrupting .evt log files

Author
6 Feb 2009 10:17 AM
Woody
Please help,
I have a 2003 SBS Server running Exchange 2003 SP2.
We are a support company and get many event log files sent to us for
interrogation. For some reason when we now recieve .evt files something in
exchange is either removing the file contents or corrupting the file. When we
try and open the save event log file we get the following error;
Unable to complete the operation on "Saved Application Log". The parameter
is incorrect.
I have tested this by sending to an alternate email address that does not go
through our exchange and it works fine, i can open and read the event log.
I have searched the internet with the above error and there is nothing at
all.
Can anyone help? This is beginning to affect the support we provide to our
customers.
Thanks in advance.

Author
6 Feb 2009 12:13 PM
Mark Arnold [MVP]
On Fri, 6 Feb 2009 02:17:01 -0800, Woody
<Wo***@discussions.microsoft.com> wrote:

Show quoteHide quote
>Please help,
>I have a 2003 SBS Server running Exchange 2003 SP2.
>We are a support company and get many event log files sent to us for
>interrogation. For some reason when we now recieve .evt files something in
>exchange is either removing the file contents or corrupting the file. When we
>try and open the save event log file we get the following error;
>Unable to complete the operation on "Saved Application Log". The parameter
>is incorrect.
>I have tested this by sending to an alternate email address that does not go
>through our exchange and it works fine, i can open and read the event log.
>I have searched the internet with the above error and there is nothing at
>all.
>Can anyone help? This is beginning to affect the support we provide to our
>customers.
>Thanks in advance.
>

The .evt files should be too big to be emailing them around. Zip them
up. People Zip those files all over the planet all day long. If they
come through corrupt then it isn't Exchange corrupting them.
Are all your drivers up to date? click for free checkup

Author
6 Feb 2009 12:26 PM
Woody
The .evt files that come from our customers PC's are not too big to email,
and an example size, which is the one i was trying to open, was 511kb, (too
big!!) No.
I appreciate you taking time to post a reply, but it does not answer my
question.
It would have been nice if you could have at least given me some theories,
rather than just saying zip it. Something has changed in exchange as it was
fine before christmas, and they were not zipped then!!

Show quoteHide quote
"Mark Arnold [MVP]" wrote:

> On Fri, 6 Feb 2009 02:17:01 -0800, Woody
> <Wo***@discussions.microsoft.com> wrote:
>
> >Please help,
> >I have a 2003 SBS Server running Exchange 2003 SP2.
> >We are a support company and get many event log files sent to us for
> >interrogation. For some reason when we now recieve .evt files something in
> >exchange is either removing the file contents or corrupting the file. When we
> >try and open the save event log file we get the following error;
> >Unable to complete the operation on "Saved Application Log". The parameter
> >is incorrect.
> >I have tested this by sending to an alternate email address that does not go
> >through our exchange and it works fine, i can open and read the event log.
> >I have searched the internet with the above error and there is nothing at
> >all.
> >Can anyone help? This is beginning to affect the support we provide to our
> >customers.
> >Thanks in advance.
> >
>
> The .evt files should be too big to be emailing them around. Zip them
> up. People Zip those files all over the planet all day long. If they
> come through corrupt then it isn't Exchange corrupting them.
>
Author
6 Feb 2009 1:05 PM
Mark Arnold [MVP]
On Fri, 6 Feb 2009 04:26:01 -0800, Woody
<Wo***@discussions.microsoft.com> wrote:

>The .evt files that come from our customers PC's are not too big to email,
>and an example size, which is the one i was trying to open, was 511kb, (too
>big!!) No.
>I appreciate you taking time to post a reply, but it does not answer my
>question.
>It would have been nice if you could have at least given me some theories,
>rather than just saying zip it. Something has changed in exchange as it was
>fine before christmas, and they were not zipped then!!
>
Exchange is not crrupting them. The anti virus might, the anti spam
might, something else might, but Exchange is not causing the pain.
I've just tested this through several organizations worth of systems
and not one caused a problem.

Check the rest of your infrastructure.
Author
6 Feb 2009 1:42 PM
Martin Blackstone [MVP]
"Mark Arnold [MVP]" <m***@mvps.org> wrote in message
news:1adoo4dtahondk2aqniam7o6vj1thqjc47@4ax.com...

> Exchange is not crrupting them. The anti virus might, the anti spam
> might, something else might, but Exchange is not causing the pain.
> I've just tested this through several organizations worth of systems
> and not one caused a problem.
>
> Check the rest of your infrastructure.

I didn't even read this reply and said the same thing. I think Mark has put
you on the right path to a solution.
Author
6 Feb 2009 1:41 PM
Martin Blackstone [MVP]
I would agree with Mark. Exchange isn't corrupting them. It doesn’t care
about file types in the least.
I would however look at everything in between. The sending mechanism, any
AV and Antispam solutions in path, etc.

Show quoteHide quote
"Woody" <Wo***@discussions.microsoft.com> wrote in message
news:18F64830-0B23-4C48-B997-D5C9446FEF59@microsoft.com...
> The .evt files that come from our customers PC's are not too big to email,
> and an example size, which is the one i was trying to open, was 511kb,
> (too
> big!!) No.
> I appreciate you taking time to post a reply, but it does not answer my
> question.
> It would have been nice if you could have at least given me some theories,
> rather than just saying zip it. Something has changed in exchange as it
> was
> fine before christmas, and they were not zipped then!!
>
> "Mark Arnold [MVP]" wrote:
>
>> On Fri, 6 Feb 2009 02:17:01 -0800, Woody
>> <Wo***@discussions.microsoft.com> wrote:
>>
>> >Please help,
>> >I have a 2003 SBS Server running Exchange 2003 SP2.
>> >We are a support company and get many event log files sent to us for
>> >interrogation. For some reason when we now recieve .evt files something
>> >in
>> >exchange is either removing the file contents or corrupting the file.
>> >When we
>> >try and open the save event log file we get the following error;
>> >Unable to complete the operation on "Saved Application Log". The
>> >parameter
>> >is incorrect.
>> >I have tested this by sending to an alternate email address that does
>> >not go
>> >through our exchange and it works fine, i can open and read the event
>> >log.
>> >I have searched the internet with the above error and there is nothing
>> >at
>> >all.
>> >Can anyone help? This is beginning to affect the support we provide to
>> >our
>> >customers.
>> >Thanks in advance.
>> >
>>
>> The .evt files should be too big to be emailing them around. Zip them
>> up. People Zip those files all over the planet all day long. If they
>> come through corrupt then it isn't Exchange corrupting them.
>>

Bookmark and Share

Post Thread options