The Event Viewer is receiving a flood of 1001 log entries.
The Event Viewer is receiving a flood of 1001 log entries.
Security update – installation completed: Windows applied the following update: Security Intelligence Update for Microsoft Defender Antivirus – KB2267602 (Version 1.429.119.0) – Broad Channel?
Additional information on 1001 can be found here: https://www.thewindowsclub.com/windows-e...1001-fixed
Yes, that's precisely what it says. I encounter updates such as these: Installation Successful – Windows applied the following patch: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.429.200.0) – Broad Channel. And others like this: Installation Successful – Windows installed 9N3RK8ZV2ZR8-Microsoft.WidgetsPlatformRuntime.
Event Viewer contains various logs such as Application, Security, Setup, etc. The specific log for Event ID 1001 is likely from the Application category. The goal is to assess whether these captured events are safe and can be safely removed periodically, while some code adjustments are being made.
Sorry, they are being recorded under Hardware.
Command output details
Max(K) Retain OverflowAction Logs
------ ------ -------------- ------- ----
20.480 0 OverwriteAsNeeded 1.628 App
20.480 0 OverwriteAsNeeded 0 Events
512 7 OverwriteOlder 0 IE
20.480 0 OverwriteAsNeeded 0 Key Mgmt
128 0 OverwriteAsNeeded 10 Alerts
20.480 0 OverwriteAsNeeded 27.408 Sec
20.480 0 OverwriteAsNeeded 2.103 System
512 7 OverwriteOlder 0 VS
15.360 0 OverwriteAsNeeded 1.015 WPS
The log in discussion is located under Event Viewer > Windows Logs > Security or Event Viewer > Applications & Services Logs > Hardware Events?
- - - -
Does this PowerShell command display the 1001 EventIDs on your system?
Use Get-WinEvent with a filter to target ID 1001 and retrieve TimeCreated, Id, Message.
There might be an initial error, but the script should proceed.
The output could be quite long, so filtering may be necessary to focus on relevant entries.
The goal is to gather those EventID 1001 issues together for analysis regardless of which logs contain them.
The logs are displayed in Event Viewer under Windows Logs > Application. There are no events recorded in Event Viewer under Applications & Services Logs > Hardware Events. The PowerShell command indicates too many logs. I uploaded everything for easier reference. Here is the link to the Pastebin.
I have numerous identical entries along with a few others that might not be favorable for my system.
🙁
Most of these "1001's" appear to be working well.
I plan to adjust the cmdlet so it can better detect the "1001's" that could be more problematic. Some extra filtering will be added.
Event ID 1001 is a general catch-all category.
For reference: https://techviral.net/event-id-1001-error/
You can quickly locate other related links with explanations and solutions. I’ll refrain from using any third-party fixes at the moment.
Pay special attention to locating and sharing those dump files as recommended by @ubuysa.
Search again for the files—you’ve gained more knowledge, and it’s possible new information could help identify further hardware issues.
Still no dump files available
I managed to retrieve a temporary file via the Reliability Monitor. Uploading it directly isn't clear, so I'm sharing a Pixeldrain link instead:
https://pixeldrain.com/u/e3iPCUKX