Remediate a Log Source with Error ELC01480 "We Are Losing Events"

The following article describes why error ELC01480 'We are losing events' may be appearing within a log source in the Alert Logic console and the actions you can take to remediate this error.

Solution

This error message may be appearing because your Windows Eventlog source does not have a sufficient buffer.

1. Expand the size of the log file allotted for the stream that is in error in the Alert Logic console.
   
   
2. Give the Alert Logic console five to ten minutes to update.
   
   
3. Within the Event Viewer, find the same log stream mentioned in the Alert Logic console. Right-click on that stream. Click Properties and increase the buffer size for the allotted log stream.