Event ID 103 — Runtime
Applies To: Windows Server 2008 R2
.jpg)
The runtime handling of incoming events relates to how the Event Log service interacts with the operating system (OS) to deliver events.
When the OS fails to deliver events, you might not receive all the events logged by the OS components and applications. When this happens, the diagnostic and troubleshooting capabilities of administrators, support personnel, developers, and automated utilities can be compromised. Because the event delivery occurs within the OS kernel, the problem can be an indication of a an issue with the resources available to the OS.
Event Details
| Product: | Windows Operating System |
| ID: | 103 |
| Source: | Microsoft-Windows-Eventlog |
| Version: | 6.1 |
| Symbolic Name: | EVENT_EVENTS_DROPPED |
| Message: | Events have been dropped by the transport. %1 |
Resolve
Improve hardware
Events are dropped or cannot be publshed by the eventing system when the volume of events being published exceeds system capabilities to process the events. The hardware (CPU speed and hard disk space) can be improved to allow the system to handle a higher volume of events, or the number of events being published should be reduced.
Verify
Use the Event Viewer to read the Analytic log on the local computer after the computer is restarted and verify that event 103 does not appear there in the log after the system was restarted.
The log should be monitored to see if event 103 appears again. This event indicates that some system activities may have increased event volume enough to flood the system with events.