VSS aware backup applications may experience a failure of the Event Log Writer. The exact error will depend on the backup program used
For example, when this happens the registry key below will contain a value of Config\MOMLog.evt:
Since the value does not contains the full path to the actual event log file it can cause backup programs (such as Tivoli Storage Manager agent) to fail when backing up the event log.
To resolve this issue, manually change the registry value to reflect the correct, full path to the MOMLog.evt file (e.g. C:\windows\system32\Config\MOMLog.evt).
Note If you keep the File key type REG_SZ, you must use the complete, actual full path of the EVT file. Variables such as %systemroot% will not work because they are not expandable, and this may cause problems.
If you want to use environment variables such as %systemroot%, you have to delete the File key and create a new File key of type REG_EXPAND_SZ. For more information about these key types, click the following article number to view the article in the Microsoft Knowledge Base:
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.
Article ID: 970219 - Last Review: Nov 30, 2010 - Revision: 1