Event ID - 5024

Event Id5024
SourceMicrosoft-Windows-WAS
DescriptionVirtual site '%1' is configured to truncate its log every '%2' bytes. Since this value must be at least 1048576 bytes ( 1 megabyte ), 1048576 bytes will be used.
Event Information According to Microsoft :

Cause :

This event is logged when Virtual site is configured to truncate its log every bytes.

Resolution :

Correct the Web site configuration

To correct the Web site configuration:
  1. Make the configuration changes as specified in the event log messages you receive.
  2. Restart the World Wide Web Publishing Service (W3SVC).
To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To stop and start the W3SVC:
  1. Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. At the command prompt, type net stop w3svc .
  3. At the command prompt, type net start w3svc .
Verify :

To verify that the Web site configuration is correct, follow these steps:
  • If you received an event log message, make the configuration changes indicated by the message.
  • Restart the World Wide Web Publishing Service (W3SVC).
  • If you received an event log message, check the event viewer to confirm that the message no longer occurs.
To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority.

Restart the World Wide Web Publishing Service

To restart the World Wide Web Publishing Service:
  1. Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. At the command prompt, type net stop w3svc .
  3. At the command prompt, type net start w3svc .
Check the event viewer logs

To check the event viewer logs:
  1. Click Start, Administrative Tools, Event Viewer .
  2. Open the log indicated by the event (for example, System ).
  3. Confirm that the message(s) no longer appear.
Reference LinksEvent ID 5024 from Source Microsoft-Windows-WAS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh