| Event Id | 8194 |
| Source | Groveler |
| Description | USN log overrun on partition D:\. |
| Event Information | CAUSE: This message usually appears twice the first time the Groveler service is started on a new volume being managed by SIS. This can also occur if the groveler has been running, but is stopped for a period of time, during which the USN journal is filled, and journal events are lost. This causes the USN journal to appear overrun to the Groveler service the next time it is started. Note that in extreme cases this may appear due to the USN journal overrunning while the Groveler service is also running. This would only occur in cases where there is an extreme amount of disk activity, and the USN journal grows at a rate faster than the Groveler can maintain. RESOLUTION: To work around this issue, the event-ID 8194 message can be ignored when it is related to the Groveler service. In situations where the Groveler service posts this message to the event log, it recreates the Groveler service database, and rescans the volume for duplicate files. This is done "on the fly" with little or no impact to the user. |
| Reference Links | Groveler Service Generates Event-ID 8194 - USN Log Overrun |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.