Empty Event Log in Symantec Mail Security for Microsoft Exchange

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

There are no entries displayed while attempting to view the Event Log in your Symantec Mail Security for Microsoft Exchange (SMSMSE) console. You have verified that SMSMSE log entries are being written successfully to the Application Log in Event Viewer.

Cause

The server's Application Log has grown to a size that is causing the SMSMSE API to timeout during the attempt to fetch the SMSMSE Application Log entries. This may have been caused by an increase in the default Application Log size or a removal of automatic log overwriting in the Event Viewer properties.

Resolution

To resolve this issue, export the server's Application Log to a safe location. Then clear the Application Log and verify that the SMSMSE Console Event Log is now populated. After doing this, it is recommended to adjust your Event Viewer maximum log size to a smaller value (such as the default 20480 KB size limit) and enable automatic log overwriting in order to prevent this issue from reoccurring.