New
#11
Anak,
Thank you again for your detailed response. BTW, my indexing was not working again this morning (1/31/18). It worked fine yesterday (1/30/18) I ran the event finder and there were over 25,000 entries. I didn't go all the way to the end, but I did find a few red and yellow warnings. None on 1/30/18 except for referring to a new program (Audacity/sound editor) I used and the indexing problem started way before I ever had that program.
On 1/28/18, there was a (yellow) warning: "The windows search service is starting up and attempting to remove the old search index. Reason: Used Requested" Event ID: 1008
Maybe this was when I did a rebuild of the index? Not sure what date I last did the rebuild.
Details:
Log Name: Application
Source: Microsoft-Windows-Search
Date: 1/28/2018 5:28:33 PM
Event ID: 1008
Task Category: Search service
Level: Warning
Keywords: Classic
User: N/A
Computer: LINDA-PC
Description:
The Windows Search Service is starting up and attempting to remove the old search index {Reason: User Requested}.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
<EventID Qualifiers="32768">1008</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-01-28T23:28:33.000000000Z" />
<EventRecordID>1479802</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>LINDA-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="ExtraInfo">
</Data>
<Data Name="Reason">User Requested</Data>
</EventData>
</Event>
On 1/27/18, I had the following (red) warning: Source: WMI Event ID 10
//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003
On 1/25/18, I had the following (red)
TOASTER.EXE
2.8.0.31
5664aae2
clr.dll
4.7.2563.0
5a334e14
80131506
002d4353
214c
01d394f684534722
C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
9ee696c3-01f1-11e8-8055-9cad97d543e6
On 1/24/18:
Log Name: Application
Source: DbxSvc
Date: 1/24/2018 1:59:38 PM
Event ID: 328
Task Category: (2)
Level: Warning
Keywords: Classic
User: N/A
Computer: LINDA-PC
Description:
We have a long running thread, command type: 3, time: 38150637
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="DbxSvc" />
<EventID Qualifiers="32770">328</EventID>
<Level>3</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-01-24T19:59:38.000000000Z" />
<EventRecordID>1478636</EventRecordID>
<Channel>Application</Channel>
<Computer>LINDA-PC</Computer>
<Security />
</System>
<EventData>
<Data>3</Data>
<Data>38150637</Data>
</EventData>
</Event>
1/24/18:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 1/24/2018 3:25:50 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LINDA-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-01-24T09:25:50.000000000Z" />
<EventRecordID>1478444</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>LINDA-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>
Does any of this tell you anything? Should I keep going with the event viewer? Again, thank you very, very much for your help.