| Event Id | 1106 |
| Source | Microsoft-Windows-Eventlog |
| Description | Events have been dropped by the event logging service. The reason code is %1. |
| Event Information | According to Microsoft : Cause This event is logged when Events have been dropped by the event logging service. Resolution Decrease the number of events logged in the Security log Events sent to the Security log are dropped (they cannot reach the Event Log service and the Security log) when their volume exceeds system capabilities. The hardware (CPU speed and disk size) can be improved to allow the system to handle a higher volume of events, or the number of events published should be reduced. For a busy domain controller system with full auditing enabled, the system attempts to publish a large number of events into the Security log. To allow the system to handle the volume, disable some auditing. Verify Use the Event Viewer to read the Security log on the local computer after the computer has been restarted. Verify that events 1101 or 1106 do not appear in the Security log. |
| Reference Links | Event ID 1106 from Microsoft-Windows-Eventlog |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.