Windows 8 and 8.1 Forums

Event Id 1

  1. #1

    New Jersey
    Posts : 114
    Windows 8.1 Pro X64

    Event Id 1

    I'm running Windows 8.1 Pro x64.

    I just began to get an Event ID 1 in my event log at boot time. It's only a warning and can probably be ignored it but curious minds like to know what is causing it and possibly how to fix it. Here's all the specifics as recorded in my event log:

    The backing-file for the real-time session "DiagLog" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.

    - System
    - Provider
    [ Name] Microsoft-Windows-Kernel-EventTracing
    [ Guid] {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
    EventID 1
    Version 0
    Level 3
    Task 1
    Opcode 10
    Keywords 0x8000000000000010
    - TimeCreated
    [ SystemTime] 2013-12-15T15:47:18.987015500Z
    EventRecordID 30
    - Execution
    [ ProcessID] 4
    [ ThreadID] 132
    Channel Microsoft-Windows-Kernel-EventTracing/Admin
    Computer Gary-PC
    - Security
    [ UserID] S-1-5-18

    - EventData
    SessionName DiagLog
    ErrorCode 3221225864
    LoggingMode 276824448

    Any info on this error would be appreciated.
    Last edited by streetwolf; 15 Dec 2013 at 14:54.

      My System SpecsSystem Spec

  2. #2

    New Jersey
    Posts : 114
    Windows 8.1 Pro X64

    After using Process Explorer to find anything with "DiagLog" in it I found this:


    The file was about 102,000 Kb with the rest of the etl files in the folder being 1-2 Kb. After taking permissions I deleted the file, shutdown, and rebooted. The file was recreated at 127 Kb and my Event Log did not show the error. It's possible that subsequent reboots will increase the size of the file. I really don't know if the error is generated because the etl file is too large or something else is wrong.

    *** looking inside this file I see lots of references to the Modern App "The Weather Channel" which I have installed. I uninstalled this app and will see what happens to the file size.
    Last edited by streetwolf; 15 Dec 2013 at 14:56.
      My System SpecsSystem Spec

Event Id 1

Similar Threads
Thread Forum
Event Viewer - Event Log Online Help
Hi, I am new to the forum and have searched to see if I can find a fix for my issue. My issue is whenever I use the Event Log Online Help link in any Event Notification all I get is transferred to this page Page Not Found I am new to Windows 8 but I used this service regularly with XP. I...
Performance & Maintenance
How do I rectify Event ID 131 in Event Viewer so I don't
keep getting it logged as an error. I have gone into Adjust Date and Time\Internet Time\and it is set to automatically synchronize with and on a scheduled basis. When I try to update or change the setting I get an error message that an error occurred while windows was...
Performance & Maintenance
Event ID 55
Hello, I hope you can help me. I am not the most technical person around but I have searched and tried to sort this before posting. I am getting event id 55 a lot in event viewer it says: - System
BSOD Crashes and Debugging
BSOD playing war thunder, Event viewer event 41
While playing war thunder on steam my screen went black and i couldn't do anything. I restart my computer and play again it crashes. After one more time i look at my event viewer and find critical error event ID:41. I don't whether its the game or my pc.
BSOD Crashes and Debugging
event viewer EVENT 14 HAL. What is it ?
Hello. I'am unable to find any information regard one entry in event viewer (eventvwr.msc) EVENT ID is 14, Source Microsoft-Windows-HAL screens: It stays, somethink like. system was limited to the periodic cycle due to...
Performance & Maintenance
Curious event in Event Viewer concerning 'with WMC'
I've noticed an intriguing event in Event viewer... Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 25. 1. 2013. 8:13:00 PM Event ID: 8208 Task Category: None Level: Error Keywords: Classic User: N/A
Windows Updates & Activation
Event 98
Hi, I'm having a problem with an error that gets logged when I startup or restart. Volume HDDRECOVERY (\Device\HarddiskVolume3) needs to be taken offline to perform a Full Chkdsk. Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via...
Drivers & Hardware

Eight Forums Android App Eight Forums IOS App Follow us on Facebook