Events 311, 312, 318.

Each time I clear the event log on two of our SQL servers, I get the
following errors a few seconds later (see below). Config is as follows:
Win2k3, IIS, SQL2000SP4, NOT Active Directory (these are primarily web
servers).
Any help in clearing up these annoying error messages would be appreciated.
----
Event Type: Warning
Event Source: SQLSERVERAGENT
Event Category: Alert Engine
Event ID: 312
Date: 27.10.2005
Time: 08:53:31
User: N/A
Computer: DNS3
Description:
Successfully re-opened the local eventlog - NOTE: Some events may have been
missed.
----
Event Type: Information
Event Source: SQLSERVERAGENT
Event Category: Alert Engine
Event ID: 311
Date: 27.10.2005
Time: 08:53:31
User: N/A
Computer: DNS3
Description:
Attempting to to re-open the local eventlog...
----
Event Type: Error
Event Source: SQLSERVERAGENT
Event Category: Alert Engine
Event ID: 318
Date: 27.10.2005
Time: 08:53:31
User: N/A
Computer: DNS3
Description:
Unable to read local eventlog (reason: The event log file has changed
between read operations).
----It's chicken and egg. The reason you get the messages is because you cleared
the event log. SQLAgent monitors the event log for alerting purposes and
when you clear it, it has to try and re-establish its monitoring. However,
if you don't use SQL Agent alerts you can delete the demo alerts that are
created when you install SQL Server (they all start with Demo) and you will
no longer get these messages (because with no alerts defined there is no
reason for SQL Agent to monitor the event log)
--
HTH
Jasper Smith (SQL Server MVP)
http://www.sqldbatips.com
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"The Vogon" <The Vogon@.discussions.microsoft.com> wrote in message
news:14E7C465-925F-4B88-9222-7CA5DED549DD@.microsoft.com...
> Each time I clear the event log on two of our SQL servers, I get the
> following errors a few seconds later (see below). Config is as follows:
> Win2k3, IIS, SQL2000SP4, NOT Active Directory (these are primarily web
> servers).
> Any help in clearing up these annoying error messages would be
> appreciated.
> ----
> Event Type: Warning
> Event Source: SQLSERVERAGENT
> Event Category: Alert Engine
> Event ID: 312
> Date: 27.10.2005
> Time: 08:53:31
> User: N/A
> Computer: DNS3
> Description:
> Successfully re-opened the local eventlog - NOTE: Some events may have
> been
> missed.
> ----
> Event Type: Information
> Event Source: SQLSERVERAGENT
> Event Category: Alert Engine
> Event ID: 311
> Date: 27.10.2005
> Time: 08:53:31
> User: N/A
> Computer: DNS3
> Description:
> Attempting to to re-open the local eventlog...
> ----
> Event Type: Error
> Event Source: SQLSERVERAGENT
> Event Category: Alert Engine
> Event ID: 318
> Date: 27.10.2005
> Time: 08:53:31
> User: N/A
> Computer: DNS3
> Description:
> Unable to read local eventlog (reason: The event log file has changed
> between read operations).
> ----
>|||Thankyou Jasper!
I have no need for SQL Agent Alerts, so the demo alerts have been deleted
and the problem is now resolved...
"Jasper Smith" wrote:
> It's chicken and egg. The reason you get the messages is because you cleared
> the event log. SQLAgent monitors the event log for alerting purposes and
> when you clear it, it has to try and re-establish its monitoring. However,
> if you don't use SQL Agent alerts you can delete the demo alerts that are
> created when you install SQL Server (they all start with Demo) and you will
> no longer get these messages (because with no alerts defined there is no
> reason for SQL Agent to monitor the event log)
> --
> HTH
> Jasper Smith (SQL Server MVP)
> http://www.sqldbatips.com
> I support PASS - the definitive, global
> community for SQL Server professionals -
> http://www.sqlpass.org
> "The Vogon" <The Vogon@.discussions.microsoft.com> wrote in message
> news:14E7C465-925F-4B88-9222-7CA5DED549DD@.microsoft.com...
> > Each time I clear the event log on two of our SQL servers, I get the
> > following errors a few seconds later (see below). Config is as follows:
> > Win2k3, IIS, SQL2000SP4, NOT Active Directory (these are primarily web
> > servers).
> >
> > Any help in clearing up these annoying error messages would be
> > appreciated.
> >
> > ----
> > Event Type: Warning
> > Event Source: SQLSERVERAGENT
> > Event Category: Alert Engine
> > Event ID: 312
> > Date: 27.10.2005
> > Time: 08:53:31
> > User: N/A
> > Computer: DNS3
> > Description:
> > Successfully re-opened the local eventlog - NOTE: Some events may have
> > been
> > missed.
> > ----
> > Event Type: Information
> > Event Source: SQLSERVERAGENT
> > Event Category: Alert Engine
> > Event ID: 311
> > Date: 27.10.2005
> > Time: 08:53:31
> > User: N/A
> > Computer: DNS3
> > Description:
> > Attempting to to re-open the local eventlog...
> > ----
> > Event Type: Error
> > Event Source: SQLSERVERAGENT
> > Event Category: Alert Engine
> > Event ID: 318
> > Date: 27.10.2005
> > Time: 08:53:31
> > User: N/A
> > Computer: DNS3
> > Description:
> > Unable to read local eventlog (reason: The event log file has changed
> > between read operations).
> > ----
> >
>
>