Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

LogReaderEvents Error

Created: 09 Feb 2008 • Updated: 22 May 2010 | 5 comments

Good day all,
I updated my Antivirus server the other day (to 10.1.6.60 version) and now I have a boat load of errors in my Application log on that server.  Here is the body of the error:

-----
Source: LogReaderEvents
Category: None
Event ID: 1

Description:
The description for Event ID ( 1 ) in Source ( LogReaderEvents ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Label not found for "last FILELOOP" at C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32/sub_logreader.pl line 363.

-----

Anyone run into this one before?  Any thoughts on how I can remedy this?

Again, I updated the server (by selecting "Install Symantec AntiVirus" then selecting "Install Symantec AntiVirus Server" then selecting "Update Symantec AntiVirus server" when running the setup.exe).  I also uninstalled the old Symantec System Center Console and installed the newer version, but I don't remember messing with the reporting agents/options.

Any input would be appreciated.
Thanks in advance!

-Paul

Comments 5 CommentsJump to latest comment

DairyFresh's picture
I'm having the same issue. It looks like it started for us out all of a sudden on 01-30-08 at around 10pm. Nothing has been changed on the system. I've googled around and do not see anything about this error.
 
Event Type: Error
Event Source: LogReaderEvents
Event Category: None
Event ID: 1
Date:  2/11/2008
Time:  3:17:56 PM
User:  N/A
Computer: %computername%
The description for Event ID ( 1 ) in Source ( LogReaderEvents ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Label not found for "last FILELOOP" at C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32/sub_logreader.pl line 363.

pnewell's picture

That's interesting; same error/line in that PL file.

I called support last night and the tech I talked with had me try a few things, but we weren't able to get it fixed-up by the time I had to leave for the night.  He wanted me roll-out the updated client across my network, but I can't do that right now; I work at a financial services firm and now is our busy season (Taxes and such), so I can't make ANY changes to my users' systems (as minute as it may be).

I'm still baffled on this one.  If I get any information I'll pass it along.  Until then...

Any Symantec mods/employees read this thread yet?  Any ideas???  Thanks!  :-)

pnewell's picture

Bump
I'm still having this problem.  I've been in contact with support a few times and they've suggested a few things (including updating the server to 10.1.7, which screwed up EVERYTHING and I had to restore a backup of the PKI folder and edit a handful of registry keys), but I'm still getting this error.

This is quite annoying that this hasn't been resolved yet.

MSheresh's picture

I am another one having this same issue.  Running 10.1.7.7000.  Log filled with entries.  I too would be very interested in a solution.  Good luck to all.

mgreen@ifaw.org's picture

Try clearing the following directory on the reporting server: C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32\Temp.LogReader

It appears we had some corrupt files and now reporting is working.

Hope this helps