Video Screencast Help

LogReaderEvents Error

Created: 09 Feb 2008 • Updated: 22 May 2010 | 5 comments

Good day all,
I updated my Antivirus server the other day (to 10.1.6.60 version) and now I have a boat load of errors in my Application log on that server.  Here is the body of the error:

-----
Source: LogReaderEvents
Category: None
Event ID: 1

Description:
The description for Event ID ( 1 ) in Source ( LogReaderEvents ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Label not found for "last FILELOOP" at C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32/sub_logreader.pl line 363.

-----

Anyone run into this one before?  Any thoughts on how I can remedy this?

Again, I updated the server (by selecting "Install Symantec AntiVirus" then selecting "Install Symantec AntiVirus Server" then selecting "Update Symantec AntiVirus server" when running the setup.exe).  I also uninstalled the old Symantec System Center Console and installed the newer version, but I don't remember messing with the reporting agents/options.

Any input would be appreciated.
Thanks in advance!

-Paul

Comments 5 CommentsJump to latest comment

DairyFresh's picture
I'm having the same issue. It looks like it started for us out all of a sudden on 01-30-08 at around 10pm. Nothing has been changed on the system. I've googled around and do not see anything about this error.
 
Event Type: Error
Event Source: LogReaderEvents
Event Category: None
Event ID: 1
Date:  2/11/2008
Time:  3:17:56 PM
User:  N/A
Computer: %computername%
The description for Event ID ( 1 ) in Source ( LogReaderEvents ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Label not found for "last FILELOOP" at C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32/sub_logreader.pl line 363.

pnewell's picture

That's interesting; same error/line in that PL file.

I called support last night and the tech I talked with had me try a few things, but we weren't able to get it fixed-up by the time I had to leave for the night.  He wanted me roll-out the updated client across my network, but I can't do that right now; I work at a financial services firm and now is our busy season (Taxes and such), so I can't make ANY changes to my users' systems (as minute as it may be).

I'm still baffled on this one.  If I get any information I'll pass it along.  Until then...

Any Symantec mods/employees read this thread yet?  Any ideas???  Thanks!  :-)

pnewell's picture

Bump
I'm still having this problem.  I've been in contact with support a few times and they've suggested a few things (including updating the server to 10.1.7, which screwed up EVERYTHING and I had to restore a backup of the PKI folder and edit a handful of registry keys), but I'm still getting this error.

This is quite annoying that this hasn't been resolved yet.

MSheresh's picture

I am another one having this same issue.  Running 10.1.7.7000.  Log filled with entries.  I too would be very interested in a solution.  Good luck to all.

mgreen@ifaw.org's picture

Try clearing the following directory on the reporting server: C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32\Temp.LogReader

It appears we had some corrupt files and now reporting is working.

Hope this helps