Windows /var/logs

I 'm starting to think I 'm not writing this stuff just to get a record of my trip from Linux to Windows development environment but I 'm also doing it to occupy my hands in the keyboard rather than using them to pull my hair off (I actually running out of hair, so I better take care of what's still left).

This time I was using Oracle XE 11g (windows) like a boss, but some day it stopped working. In fact it's behavior was like if it was starting and never ended starting.

It would not accept connections, even as sysdba user.

I 've issued several commands, here I show them with their output.

The conclusion is that the oracle instance (XE) was in BLOCKED status because it couldn't write it's audit records in the WINDOWS EVENT LOG.


sqlplus as sysdba:

 

PS C:\oraclexe\app\oracle\diag\tnslsnr\ARBAN326\listener> sqlplus "/as sysdba"

SQL*Plus: Release 11.2.0.2.0 Production on Jue Jun 12 11:01:53 2014

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

ERROR:
ORA-28056: Writing audit records to Windows Event Log failed
OSD-245021808: Message 245021808 not found;  product=RDBMS; facility=SOSD
O/S-Error: (OS 1502) The event log file is full.
ORA-01075: you are currently logged on

      

lsnrctl command (this command controls the oracle connection listener, at least I  could use it to ask for it's status):

 PS C:\Documents and Settings\a506334> lsnrctl  
   
 LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 12-JUN-2014 10:49:13  
   
 Copyright (c) 1991, 2010, Oracle. All rights reserved.  
   
 Welcome to LSNRCTL, type "help" for information.  
   
 LSNRCTL> STATUS OF LISTENER  
 NL-00857: wrong number (0 - 1 needed) of arguments to "status"  
 LSNRCTL> status  
 Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))  
 STATUS of the LISTENER  
 ------------------------  
 Alias           LISTENER  
 Version          TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production  
 Start Date        12-JUN-2014 09:41:55  
 Uptime          0 days 1 hr. 16 min. 54 sec  
 Trace Level        off  
 Security         ON: Local OS Authentication  
 SNMP           OFF  
 Default Service      XE  
 Listener Parameter File  C:\oraclexe\app\oracle\product\11.2.0\server\network\admin\listener.ora  
 Listener Log File     C:\oraclexe\app\oracle\diag\tnslsnr\ARBAN326\listener\alert\log.xml  
 Listening Endpoints Summary...  
  (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))  
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ARBAN326.scba.ar.int.atosorigin.com)(PORT=1521)))  
 Services Summary...  
 Service "CLRExtProc" has 1 instance(s).  
  Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...  
 Service "PLSExtProc" has 1 instance(s).  
  Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...  
 Service "xe" has 1 instance(s).  
  Instance "xe", status BLOCKED, has 1 handler(s) for this service...  
 The command completed successfully  
 LSNRCTL>  
   
   
   

So, the WINDOWS EVENT LOG...

I 've found a couple of useful posts in oracle forums that helped me to figure out how to solve this problem of full logs. One of them told where were the logs and how to clear them.

Control Panel->Administrative Tools->Event Viewer->Clear All Events


In case that doesn't work once you 're in the log viewer if you right-click each of the logs and select Properties then you would access to a menu where you can clear logs, but you 've got also a couple more interesting options like:

• Increase log maximum size (DEFAULTS ARE INCREDIBLE AS LOW AS 512kb)
• Allow overwriting of logs, in case the log reaches it's maximum size it still works by overwriting oldest entries (THOSE WITH 512kb LOW LIMITS WERE ALSO SETTED IN DO NOT OVEWRITE)

So once again I 've lost a couple of hours with all this stuff, hope this helps anyone else, enjoy windows and please do not jump... life continues.