You will find that I had some BSOD recently, but these are all resolved. They were from a bad driver for an Asmedia HDD controller. I rolled the driver back to a reliable driver that I had previously used for more than a year without any issues. I have no BSOD issues at this time. The only issue I have to deal with is the broken Diagnostics-Performance/Operational log. Let me know what you think. Thanks.
Diagnostics-Performance Operational Log is Broken - No Entries
For at least several months now my Diagnostics-Performance Operational log is empty. It has never showed any entries. My boot times are not a major issue, but they are always longer than 1 minute and sometimes as long as 2 minutes and I have an SSD boot drive. My original boot times were 15 to 30 seconds when I first installed the system. I've tried clean boot without much difference in boot times. It is not an issue that system restore can help. The system is Windows 7 PRO SP 1 64-bit. It's an i7-3770K with 16GB RAM, 120GB SSD and 1TB Raid 1 drives. I don't know what other system information may be helpful.
I don't know if this is related but I've enabled boot logging and seen that Windows apparently tries to load all drivers at least 6 times and Windows attempts to load a certain group of drivers a couple hundred times. The attempt to load a driver for one of my printers is repeated 290 times in the ntbtlog.txt. It fails all 290 times.
I've changed the values in my registry to report boots as slow between 30 and 60 seconds rather than the 60 to 120 seconds which is standard so all of my boots should produce an entry in the diagnostics-performance/operational log. These values are located at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\Performance\Boot in the registry.
At every boot, the Eventlog/Analytic log found at "Event Viewer/Applications and Services/Microsoft/Windows/Eventlog/Analytic" posts multiple entries showing Event ID 100 with the message: "The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Diagnostics-Performance." The error code is 13. Here is the listing for the error:
- <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
- <System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>100</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x800000000020000</Keywords>
<TimeCreated SystemTime="2014-06-28T15:36:15.248418900Z" />
<EventRecordID>1</EventRecordID>
<Correlation />
<Execution ProcessID="1208" ThreadID="2216" ProcessorID="1" KernelTime="0" UserTime="0" />
<Channel>Microsoft-Windows-EventLog/Analytic</Channel>
<Computer>Raging-PCII</Computer>
<Security UserID="S-1-5-19" />
</System>
- <UserData>
- <EventProcessingFailure
xmlns:auto-ns3=**http://schemas.microsoft.com/win/2004/08/events**xmlns="**http://manifests.microsoft.com/win/2004/08/windows/eventlog**">
<Error Code="13" />
<EventID>0</EventID>
<PublisherID>Microsoft-Windows-Diagnostics-Performance</PublisherID>
</EventProcessingFailure>
</UserData>
</Event>
The Diagnostics-Performance/Operational log is surely broken, but no information is available through search on a such a broken log. Every time I Google a broken diagnostics-performance/operational log or boot log, Google thinks I'm researching slow boot times. Nothing on the lack of entries in the log or a nonfunctional log is returned. I have also enabled permissions for the "eventlog" and "local service" users on the operational log itself and the registry entries for the diagnostics-performance operational log. I have attempted just about everything I can try. I figure it is now time to ask for help.
Windows for home | Previous Windows versions | Windows update
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
40 answers
Sort by: Most helpful
-
Anonymous
2014-06-29T22:08:20+00:00 -
Anonymous
2014-06-29T21:45:51+00:00 Ramesh,
Yes, I have a slow boot. My system booted in 1:20 with an SSD which is kind of long, however, I am not looking for information on how to speed up my boot at this particular time. I am looking for information on how to get my Diagnostics-Performance/Operational log working. It has not worked for months and since I have no entries in it, I can't say how long it's been broke exactly.
The Event ID 100 came from the Eventlog log, not the Diagnostics-Performance/Operational log. Apparently something may be wrong with the WMI performance providers for the Diagnostics-Performance/Operational log. I get the Eventlog Event ID 100 in the Eventlog every time I boot and what appears to be randomly at other times, but I never get any entries in the Diagnostics-Performance/Operational log itself. Thank you for responding to my post and I can use any information you may have.
-
Anonymous
2014-06-29T21:37:07+00:00 The link for the files you requested is:
Please remember the information I am looking for is how to get my Diagnostics-Performance/Operational log working. I am not looking for information on how to speed up my boot or my system. That type of information is available on the web in abundance, however, it is difficult to use it if the boot log is not working. Thanks for your reply.
-
Anonymous
2014-06-29T11:17:55+00:00 Hello Richard,
Thank you for posting your query on Microsoft Community Forum and I must appreciate you for providing us the information in so detailed way.
I would appreciate if you can provide us the following information to help us understand the issue better.
Have you made any changes (Hardware or Software) on your computer prior to the issue?
As per the information which you have provided in your post it seems that you facing slow boot problem. The EventID 100 also deals with slow boot issue.
I would suggest you to run the hotfix provided in the following link and check if it helps.
If issue still persists I would suggest you to boot the computer in safe mode and check the status.
Step 1:
Refer to the link to boot in safe mode.
Advanced startup options (including safe mode).
http://windows.microsoft.com/en-in/windows7/advanced-startup-options-including-safe-mode
Step 2:
If your computer works fine in safe mode, I would suggest you to perform clean boot.
Putting your system in Clean Boot state helps in identifying if any third party applications or startup items are causing the issue. You need to follow the steps from the article mentioned below to perform a Clean Boot.
Refer to the link to perform clean boot.
How to perform a clean boot in Windows
http://support.microsoft.com/kb/929135/en-us
Note: Refer "How to reset the computer to start normally after clean boot troubleshooting" to reset the computer to start as normal after troubleshooting.
Hope this would help. If issue still persists post back with current status of your computer and result of the proposed suggestion, we will be happy to assist you.
Regards.
-
Anonymous
2014-06-29T11:13:59+00:00 Please provide a copy of your System Information file. Type System Information in the Search Box above the start Button and press the ENTER key (alternative is Select Start, All Programs, Accessories, System Tools, System Information). Select File, Export and give the file a name noting where it is located. Do not place the cursor within the body of the report before exporting the file. The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload to your OneDrive (formerly Sky Drive), share with everyone and post a link here. Reports in normal mode preferred. Please say if the report has been obtained in safe mode.
Please upload and share with everyone fresh copies of your System and Application logs from your Event Viewer to your One Drive (formerly Sky Drive) and post a link here. You can remove the earlier copies of the logs from your OneDrive.
Please upload and share with everyone copies of your System and Application logs from your Event Viewer to your OneDrive and post a link here.
To access the System log select Start, Control Panel, Administrative Tools, Event Viewer, from the list in the left side of the window expand Windows Logs and select System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do the same for the Applications log. Do not provide filtered files. Do not clear logs whilst you have a continuing problem.
For help with OneDrive see paragraph 9.3:
http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm
General notes on Event Viewer