Windows event ID 4612 - Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits

Event ID: 

4612

Category: 

System

Subcategory: 

System Integrity

Supported on: 

Windows Vista, Windows Server 2008

Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits.

Number of audit messages discarded: %1

This event is generated when audit queues are filled and events must be discarded. This most commonly occurs when security events are being generated faster than they are being written to disk, or when the auditing system loses connectivity to the event log, such as when the event log service is stopped.

Related content