The events queue is dynamic, but 1,000,000 in this folder seems excessive. These events are effectively unprocessed - you can delete them if you wish but you lose the associated data for reporting in doing so.
The log snippet shows the event parser is working though, for example:
20100407091604 I #2920 EVNTPRSR Process F:\DATA\EPO4.5\DB\Events\z0002e172d9c-6cba-4cfa-8f38-7dcce0bc7a22-20100403020444822218300000790.xml succeeded (IEPOBllExt)
The error suggests that ePO does not understand something in these other event files:
20100407091604 E #2928 NAEPODAL CEPODAL::ExecQuery: COM Error(0x80040E07) Error converting data type varchar to uniqueidentifier.
20100407091604 E #2928 VseBll DAL->ExecQuery failed. hr=80040e07
20100407091604 E #2928 EVNTPRSR server_ProcessXMLFile: COM Error :80004005 server_ProcessXMLFile
20100407091604 E #2928 EVNTPRSR Meaning = Unspecified error
20100407091604 E #2928 EVNTPRSR Source = (null)
20100407091604 E #2928 EVNTPRSR Description = (null)
VseBLL suggests these are from VirusScan. If you wish, find the oldest one in the list and open it up for review to see which component it has come from for sure.
Otherwise make sure you are up to date with your VirusScan extensions in the ePO console, as this is where the event format is described
.
With so many events to process, it will take some time to clear and process and the ePO DB is going to grow somewhat. It may be simpler to back them off somewhere then reinsert to the events folder in smaller numbers.
You should probably stop the ePO services while doing that.
Rgds,
Rob.
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
You Deserve an Award
