I get an error event 1501 trying to start the Event Log service.

John Savill

November 23, 1999

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. If when you try and start the Event log service you get error1501, unable to open Event log files this is usually caused by one of two things

  • The event log files are missing

  • The event log files have read only set on them

The event log files are stored in the %systemroot%system32config and arenamed appevent.evt, secevent.evt and sysevent.evt. If any files are missing trycopying from another machine and if the read only attribute is set remove viaExplorer.

It is possible to move the event log files and to check you are looking inthe correct place check the registry entries:

  • HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogApplicationFile

  • HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogSecurityFile

  • HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogSystemFile

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like