Event ID 6 — Publishing Events
Applies To: Windows Server 2008 R2
.jpg)
The function of the Event Collector service is to receive events from event sources, which are remote Windows computers, and to publish these events into a local event log. The ability to save the events depends on the settings for the Event Log service.
Event Details
| Product: | Windows Operating System |
| ID: | 6 |
| Source: | Microsoft-Windows-EventCollector |
| Version: | 6.1 |
| Symbolic Name: | EVTCOLL_PUBLISHING_FAILURE |
| Message: | The Subscription %1 could not publish events from target machine %2 to the log file of this subscription. Error Code is %3. All retries have been performed before reaching this point and so the subscription will remain inactive on this target until subscription is resubmitted / reset. |
Diagnose
Events could not be published. First, attempt to increase the disk space to fix the problem, and if event 6 appears in the System log after disk space has been increased, try to resolve Event Log service errors to fix the problem.
Resolve
To resolve this issue, use the resolution that corresponds to the cause you identified in the Diagnose section. After performing the resolution, see the Verify section to confirm that the feature is operating properly
Cause |
Resolution |
|---|---|
Event Log Service Problem |
Fix Event Log service errors |
Low Free Space on System Volume |
Increase the disk space |
Fix Event Log service errors
Event 6 can indicate that there is a problem with the Event Log service (for example, the service could not start). To fix the problems with the Event Log service, the Event Log service errors must be resolved. For general troubleshooting information about the Event Log service that should help resolve the problem, see https://go.microsoft.com/fwlink/?LinkId=92637.
Increase the disk space
Events could not be delivered to the Event Log service. Normally, when this is the case, the system stores the undelivered events in a buffer, and the events are later delivered when the Event Log service becomes available. The events are saved into a file on the local hard disk. Lack of space on the hard disk may prevent this from happening. Check the amount of free space on the hard disk and try to increase this amount by deleting files.
To check the free disk space available on the local hard disk:
- Click the Start button.
- Click Computer.
- Click the drive that represents the local hard disk. After the drive is selected, the Details pane will show the free space on the drive.
Verify
Restart the local computer and then use the Event Viewer to read the System event log. Verify that there are no new events with an event identifier equal to 6 or 501 that were logged after the computer was restarted.