Event ID: 4, Source: Microsoft-Windows-Kernel-EventTrac ing, maximum file size for session "ReadyBoot" has been reached.
Hello, I upgraded my machine to Win7 x64 Pro about 3 weeks ago. My HW is an Asus mobo, Intel Q9450 w/8GB RAM. The boot drives are two Raptors configured as RAID01. All the drivers are the latest available from Intel, Asus and 3rd party vendors. My WEI is 5.9, limited by the disk transfer rates, otherwise 7.1 and 7.2 on the other indexes. I've been receiving these errors at boot; Log Name: Microsoft-Windows-Kernel-EventTracing/Admin Source: Microsoft-Windows-Kernel-EventTracing Date: 11/10/2009 7:51:03 AM Event ID: 4 Task Category: Logging Level: Warning Keywords: Session User: SYSTEM Computer: herbt-PC Description: The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" /> <EventID>4</EventID> <Version>0</Version> <Level>3</Level> <Task>1</Task> <Opcode>10</Opcode> <Keywords>0x8000000000000010</Keywords> <TimeCreated SystemTime="2009-11-10T12:51:03.393985600Z" /> <EventRecordID>28</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="164" /> <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel> <Computer>herbt-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="SessionName">ReadyBoot</Data> <Data Name="FileName">C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl</Data> <Data Name="ErrorCode">3221225864</Data> <Data Name="LoggingMode">0</Data> <Data Name="MaxFileSize">20971520</Data> </EventData> </Event> The image for PID 4 is listed as System. My searches have turned up similar events listed but no solutions. Any help would be appreciated. Cheers!
November 10th, 2009 5:05pm

Hi, I would like to know if you are able to boot into the system now and if the ReadyBoost is used. To troubleshoot this issue, please check if it occurs in Safe mode first. If it persists, try enabling the Superfetch service: Start Superfetch service =========================== 1. Click the Start Button, type "services.msc" (without quotes) in Start Search box, and press Enter. 2. Double click the service "Superfetch". 3. Click on the "General" tab; make sure the "Startup Type" is "Automatic" or "Manual". Then please click the "Start" button under "Service Status" to start the service. 4. Click OK. Vivian Xing - MSFT
Free Windows Admin Tool Kit Click here and download it now
November 11th, 2009 10:27am

Hi Vivian,Thanks for the reply.This error is popping up about every other day. - I'm not using ReadyBoost, system has 8GB RAM- Superfetch is set to "Automatic" and was started when I checked it's state this morning. I did get the ReadyBoot error this morning too.- In about half the instances where the error above occurs it is immediately preceded in the events log by the following error that has the same time stamp but I'm assuming as it's listed first that at a higher time resolution it is occurring first.Log Name: Microsoft-Windows-Kernel-EventTracing/AdminSource: Microsoft-Windows-Kernel-EventTracingDate: 11/16/2009 8:16:35 AMEvent ID: 3Task Category: SessionLevel: ErrorKeywords: SessionUser: SYSTEMComputer: herbt-PCDescription:Session "ReadyBoot" stopped due to the following error: 0xC0000188Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" /> <EventID>3</EventID> <Version>0</Version> <Level>2</Level> <Task>2</Task> <Opcode>14</Opcode> <Keywords>0x8000000000000010</Keywords> <TimeCreated SystemTime="2009-11-16T13:16:35.547197100Z" /> <EventRecordID>31</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="164" /> <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel> <Computer>herbt-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="SessionName">ReadyBoot</Data> <Data Name="FileName">C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl</Data> <Data Name="ErrorCode">3221225864</Data> <Data Name="LoggingMode">0</Data> </EventData></Event>As this isn't an every boot occurrance let me know if you would still like me to try booting in safte mode.Thanks,Herb
November 16th, 2009 5:12pm

Hi Vivian, any ideas on this?Thanks
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2009 12:12am

You can ignore this. This only shows, that the log file is too small and the kernel can't save all ETW (Event Tracing for Windows) Events for ReadyBoot (not ReadyBoost). ReadyBoot is the improved Bootprefetcher, you know from XP. André"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
December 18th, 2009 3:19pm

I have the exact same errors. I don't want to ignore it. Wouldn't I want the system to log events that need to be logged??? If a log file is too big, shouldn't it rollover automatically? I did disable Superfetch a couple of weeks ago when I was trying (unsuccessfully) to address the constant disk activity light. When I read about superfetch at the time, I concluded it was not necessary for my system needs. If that's the culprit to this issue, why are these things optional? But may not be related as the OP has superfetch enabled. Also, I use hibernate nearly all the time. WHen I just came out of hibernation now, an alert on the screen flashed by, but it was too fast to read it. Something about "last boot...". That's when I went to the Event Viewer to see what that alert was, but nothing applicable seen, except maybe this. And I don't exactly know if its applicable to the ReadyBoot error because I couldn't read the screen error. It doesn't help that the "More Information" link for event_log_online never comes back with anything. :-( Besides, regular users shouldnt have to be troubleshooting the kernel!!! I just want to drive the car. If a light comes on and says I need an oil change, okay, I can handle that. :-)
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2009 10:07pm

I have exactly the same problem. I am running Windows 7 x64bit with 12 GB of RAM. Superfetch is already in Auto. I assume this is just a Windows 7 quirk.
December 19th, 2009 7:19pm

Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035 As suggested above I assume this is a microsoft issue? It has been discussed here and other forums for quite some time. I never have seen a fix? I wish when we received errors of this nature microsoft would tell us what they were. How is this related to superfetch? What is superfetch? Why would superfetch have changed? BY THE WAY.... Superfetch is on(started) is on automatic and logs on as local system. So this is not the cause of my issue. Also what is readyboot? Does the average computer really know what these programs/services or unique microsoft words/terms are? - System - Provider [ Name] Microsoft-Windows-Kernel-EventTracing [ Guid] {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2} EventID 2 Version 0 Level 2 Task 2 Opcode 12 Keywords 0x8000000000000010 - TimeCreated [ SystemTime] 2010-04-11T14:35:49.829600000Z EventRecordID 25 Correlation - Execution [ ProcessID] 4 [ ThreadID] 48 Channel Microsoft-Windows-Kernel-EventTracing/Admin Computer Daddy-PC - Security [ UserID] S-1-5-18 - EventData SessionName Circular Kernel Context Logger FileName ErrorCode 3221225525 LoggingMode 268436608 Windows7, Windows, Win7
Free Windows Admin Tool Kit Click here and download it now
April 11th, 2010 6:22pm

Same issues here, have searched for months & months for a solution but found none. Please update if you have any ideas.
April 23rd, 2010 8:02pm

Hey guys, the solution is simple - just increase the max file size! Go to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\ReadyBoot The MaxFileSize key is a DWORD with a default decimal value of 20. Increase this to, say 60, and the problem will go away. Luck to ya!
Free Windows Admin Tool Kit Click here and download it now
May 9th, 2010 11:56pm

Sorry gang - I will have to report results back as they roll in for changing the MaxFileSize key. However - this is why EVERYONE I know laughs in my face with vigor for bothering to attempt WIN 7/64 bit in a (small, no IT nerds) business production environment. It is almost time to can this bleeding edge jive and go back to an OS that works.
November 11th, 2010 8:18am

I can't even find a file called C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl It's too big? Where is it? The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes. Session "ReadyBoot" stopped due to the following error: 0xC0000188
Free Windows Admin Tool Kit Click here and download it now
December 17th, 2010 12:13pm

Change the setting in the registry, please."A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
December 17th, 2010 3:43pm

Thank you Andre.Ziegler, this fix worked perfectly!
Free Windows Admin Tool Kit Click here and download it now
September 18th, 2011 12:56pm

I ran into this as well and just wanted to suggest another way to set the MaxFileSize without having to use regedit.exe. ---- * Open the Performance Monitor management console, e.g., "Administrative Tools" -> "Performance Monitor", or, "perfmon.msc /s" from the Command Prompt. * Under the management console sub-folder "Data Collector Sets" -> "Startup Event Trace Sessions", Open the "ReadyBoot" Trace Session Property Sheet. * Select the "Stop Condition" panel. * Increase the "Maximum Size" value as needed. * Press OK, and exit. ---- This method is a bit safer than using regedit.exe. Hope this is helpful. Regards, Rob
April 27th, 2012 4:19pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics