Windows 10: Event 1108 due to Event 4688

Discus and support Event 1108 due to Event 4688 in Windows 10 Software and Apps to solve the problem; The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.None of my process... Discussion in 'Windows 10 Software and Apps' started by Selva Kumaresan, Nov 25, 2022.

  1. SELVA KUMARESAN
    Selva Kumaresan Win User

    Event 1108 due to Event 4688


    The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.None of my process creation event is being logged. All these logs are thrown as event 1108 with error code 15003 and 15005. Don't know what to do. Please help me fix this issue.

    :)
     
    Selva Kumaresan, Nov 25, 2022
    #1
  2. IGOR LEYKO
    Igor Leyko Win User
    Igor Leyko, Nov 25, 2022
    #2
  3. LAKEBERG
    LakeBerg Win User
    Event viewer - Event id 4688

    I tried to create a custom view, with Windows Logs as the event log, and 4688 as the event ID. I had no other changed settings, and I expected this to give me a stream of events showing whenever I opened an application. Instead I only got events related
    to Microsoft processes.

    I want to have this because I want to run a program whenever a specific program runs.

    I wonder if there is a problem with how I created the custom view, or if there is a different way to see when a program

    Edit : As per Igor Leyko's reply, I have tried to enable process auditing. I have done so in :

    Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit process tracking

    Computer Configuration\Windows Settings\Security Settings\Advanced Audit Policy Configuration\System Audit Policies - Local Group Policy Object\Detailed Tracking\Audit Process Creation

    But still it doesn't work, maybe I missed a setting, I'm not sure.
     
    LakeBerg, Nov 25, 2022
    #3
  4. ZXZS
    ZXZS Win User

    Event 1108 due to Event 4688

    Event ID 4688 not showing anything, but 4696 does

    Hi,

    I have turned on Local Security Policy: Advanced Audit Policy Configuration > System Audit Policies > Detailed Tracking > Audit Process Creation = Success.

    And according to this :

    Audit Process Creation (Windows 10) I should get both event 4688 and event 4696. But I only get logs for 4696. And they don't show all of the programs that were started.

    Also I implemented MS Security Baseline for Win 11 22H2 from here:

    https://www.microsoft.com/en-us/download/details.aspx?id=55319

    What else do I have to enable to get event 4688 ?
     
    ZXZS, Nov 25, 2022
    #4
Thema:

Event 1108 due to Event 4688

Loading...

  1. Event 1108 due to Event 4688 - Similar Threads - Event 1108 due

  2. Need Thoughts on These Event 4688 and WMI Event 5861 Instances

    in Windows 10 Gaming
    Need Thoughts on These Event 4688 and WMI Event 5861 Instances: so my PC has a little bit of a kink to it where sometimes, during boot, the VGA light on the motherboard will hang and fast startup will fail; eventually, the monitor and Windows will come up as normal and everything will function perfectly fine. it's done this since I got...

  3. Need Thoughts on These Event 4688 and WMI Event 5861 Instances

    in AntiVirus, Firewalls and System Security
    Need Thoughts on These Event 4688 and WMI Event 5861 Instances: so my PC has a little bit of a kink to it where sometimes, during boot, the VGA light on the motherboard will hang and fast startup will fail; eventually, the monitor and Windows will come up as normal and everything will function perfectly fine. it's done this since I got...

  4. Need Thoughts on These Event 4688 and WMI Event 5861 Instances

    in Windows 10 Software and Apps
    Need Thoughts on These Event 4688 and WMI Event 5861 Instances: so my PC has a little bit of a kink to it where sometimes, during boot, the VGA light on the motherboard will hang and fast startup will fail; eventually, the monitor and Windows will come up as normal and everything will function perfectly fine. it's done this since I got...

  5. Event 1108 due to Event 4688

    in Windows 10 Gaming
    Event 1108 due to Event 4688: The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.None of my process creation event is being logged. All these logs are thrown as event 1108 with error code 15003 and 15005. Don't know what to...

  6. Windows 11 EVENT 1108 The event logging service encountered an error while processing an...

    in Windows 10 Gaming
    Windows 11 EVENT 1108 The event logging service encountered an error while processing an...: Hello.This error has occurred even on a fresh install of Windows 11, I cannot seem to fix this. The steps I have taken are...Disabling all auditing.auditpol /set /category:* /success:disable /failure:disable auditpol /get /category:* Seem to set all to `No Auditing`.What's...

  7. Windows 11 EVENT 1108 The event logging service encountered an error while processing an...

    in Windows 10 Software and Apps
    Windows 11 EVENT 1108 The event logging service encountered an error while processing an...: Hello.This error has occurred even on a fresh install of Windows 11, I cannot seem to fix this. The steps I have taken are...Disabling all auditing.auditpol /set /category:* /success:disable /failure:disable auditpol /get /category:* Seem to set all to `No Auditing`.What's...

  8. Event ID 4688 not showing anything, but 4696 does

    in Windows 10 Gaming
    Event ID 4688 not showing anything, but 4696 does: Hi,I have turned on Local Security Policy: Advanced Audit Policy Configuration > System Audit Policies > Detailed Tracking > Audit Process Creation = Success. And according to this :...

  9. Event ID 4688 not showing anything, but 4696 does

    in Windows 10 Software and Apps
    Event ID 4688 not showing anything, but 4696 does: Hi,I have turned on Local Security Policy: Advanced Audit Policy Configuration > System Audit Policies > Detailed Tracking > Audit Process Creation = Success. And according to this :...

  10. Event viewer - Event id 4688

    in Windows 10 Customization
    Event viewer - Event id 4688: I tried to create a custom view, with àwindows as the event log, and 4688 as the event ID. I had no other changed settings, and I expected this to give me a stream of events showing whenever I opened an application. Instead I only got events related to Microsoft processes....