Share via

Event ID 6 — Publishing Events

  • Article

Applies To: Windows Server 2008

The function of the Event Collector service is to receive events from event sources, which are remote Windows computers, and to publish these events into a local event log. The ability to save the events depends on the settings for the Event Log service.

Event Details

Product: Windows Operating System
ID: 6
Source: Microsoft-Windows-EventCollector
Version: 6.0
Symbolic Name: EVTCOLL_PUBLISHING_FAILURE
Message: The Subscription %1 could not publish events from target machine %2 to the log file of this subscription. Error Code is %3. All retries have been performed before reaching this point and so the subscription will remain inactive on this target until subscription is resubmitted / reset.

Diagnose

Events could not be published. First, attempt to increase the disk space to fix the problem, and if event 6 appears in the System log after disk space has been increased, try to resolve Event Log service errors to fix the problem.

Resolve

To resolve this issue, use the resolution that corresponds to the cause you identified in the Diagnose section. After performing the resolution, see the Verify section to confirm that the feature is operating properly

Cause

Resolution

Event Log Service Problem

Fix Event Log service errors

Low Free Space on System Volume

Increase the disk space

Fix Event Log service errors

Event 6 can indicate that there is a problem with the Event Log service (for example, the service could not start). To fix the problems with the Event Log service, the Event Log service errors must be resolved. For general troubleshooting information about the Event Log service that should help resolve the problem, see https://go.microsoft.com/fwlink/?LinkId=92637.

Increase the disk space

Events could not be delivered to the Event Log service. Normally, when this is the case, the system stores the undelivered events in a buffer, and the events are later delivered when the Event Log service becomes available. The events are saved into a file on the local hard disk. Lack of space on the hard disk may prevent this from happening. Check the amount of free space on the hard disk and try to increase this amount by deleting files.

To check the free disk space available on the local hard disk:

  1. Click the Start button.
  2. Click Computer.
  3. Click the drive that represents the local hard disk. After the drive is selected, the Details pane will show the free space on the drive. 

Verify

Restart the local computer and then use the Event Viewer to read the System event log. Verify that there are no new events with an event identifier equal to 6 or 501 that were logged after the computer was restarted.

Publishing Events

Management Infrastructure