Odd Event Error (ID)3/4 Kernel-EventTracing

LostSamurai said:

To put in perspective the events leading up to these errors. I activated a system restore yesterday and then after the system rebooted I got a BSOD at start up, after attempting to fix the issue with StartUp Repair I was informed that I couldn't and was left with either the option to attempt to repair Windows or go with a new installation. I chose a new installation.

I'm running Windows 7 64-bit Home Premium.

Both errors occurred at 5:24 a.m. this morning and repeated at 12:20 p.m. The files in quotations were different in each instance. I would like to know if this is something to be concerned about and if possible how to fix it. Thank you.

edit: Just occurred after installing an app. 3:42 p.m.

Event ID 3 (Error)
Session "{88298fa1-3a24-4ad1-bb4c-20f9854f597b}" stopped due to the following error: 0xC0000188

- System
- Provider
[ Name] Microsoft-Windows-Kernel-EventTracing
[ Guid] {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
EventID 3
Version 0
Level 2
Task 2
Opcode 14
Keywords 0x8000000000000010
- TimeCreated
[ SystemTime] 2011-02-23T18:20:13.256000000Z
EventRecordID 5
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 3320
Channel Microsoft-Windows-Kernel-EventTracing/Admin
Computer Michael-PC
- Security
[ UserID] S-1-5-18
- EventData
SessionName {88298fa1-3a24-4ad1-bb4c-20f9854f597b}
FileName C:\Windows\AppCompat\Programs\Install\INSTALL_0_{b56e5b69-3695-4e51-adad-36941dd3f14e}.etl
ErrorCode 3221225864
LoggingMode 5

Event ID 4
The maximum file size for session "{88298fa1-3a24-4ad1-bb4c-20f9854f597b}" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\AppCompat\Programs\Install\INSTALL_0_{b56e5b69-3695-4e51-adad-36941dd3f14e}.etl". The maximum files size is currently set to 10485760 bytes.

- System
- Provider
[ Name] Microsoft-Windows-Kernel-EventTracing
[ Guid] {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
EventID 4
Version 0
Level 3
Task 1
Opcode 10
Keywords 0x8000000000000010
- TimeCreated
[ SystemTime] 2011-02-23T18:20:13.256000000Z
EventRecordID 4
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 3320
Channel Microsoft-Windows-Kernel-EventTracing/Admin
Computer Michael-PC
- Security
[ UserID] S-1-5-18
- EventData
SessionName {88298fa1-3a24-4ad1-bb4c-20f9854f597b}
FileName C:\Windows\AppCompat\Programs\Install\INSTALL_0_{b56e5b69-3695-4e51-adad-36941dd3f14e}.etl
ErrorCode 3221225864
LoggingMode 5
MaxFileSize 10485760

These are both Information, not critical errors. One tells you there was a problem with logging the install. The other (4) tells you the log is full (10 Mb). either clear the log or increase its size.


Ken J

Far as i've come to understand the .etl files created are either simply logs or required to display certain events properly in the event viewer but the logs are limited for whatever reason at 10.2MB and so if a log is created that exceeds the limit you receive an error in the event viewer.

I'm not 100% positive but it seems mostly harmless. The only problems I can foresee is that you may not get a proper event notice or you may not get all of the information necessary if you need to open the file for diagnostics.

Just saying for future reference if anyone else comes across this issue.

I don't know if there is a limitation to how long the logs are kept, how to increase the size limit (although I assume it can be adjusted using regedit), or what should be a relatively adequate size to adjust the files to.

edit: Sorry Ken J., started this post before I was aware you had posted. If you would please address the last 2 parts before the edit i'd greatly appreciate it. I've spent 15 minutes searching on how I should go about it with no luck on finding anything relative.