How to fix Event Log error 1108 (Microsoft Windows Security Auditing) in Windows?

Question

Issue: How to fix Event Log error 1108 (Microsoft Windows Security Auditing) in Windows?

Hello. I recently installed Windows 11 on my computer and I keep getting the Event Log error 1108 related to Microsoft Windows Security Auditing. Any tips would be appreciated.

Solved Answer

Windows 11 was released at the end of 2021. Microsoft introduced a new user interface, design, and features. However, many people are having various issues. We previously wrote about Windows 11 problems such as icons keep disappearing from taskbar, high RAM usage, Security Dashboard won't open, etc.

Recently, some people encountered error 1108 in the Event Viewer. The full message reads as follows:

The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

Windows security auditing[1] is a feature designed to monitor user activity, investigate potential incidents, and determine solutions for any identified issues. This helps to ensure that both the computer and corporate network are secure. The Event Log error 1108 could be caused by corrupted files, missing Windows updates, service malfunction, or the Windows registry.[2]

In this guide, you will find 7 steps that should help you fix Event Log error 1108 (Microsoft Windows Security Auditing) in Windows. Keep in mind that the manual troubleshooting process can be lengthy. To avoid it, you can use a maintenance tool like ReimageMac Washing Machine X9 that can fix most system errors, BSODs,[3] corrupted files, and registry issues. Otherwise, follow the step-by-step instructions below.

How to fix Event Log error 1108 Microsoft Windows Security Auditing in Windows

Method 1. Fix Corrupted System Files

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.

Use Command Prompt commands to repair system file corruption:

  • Open Command Prompt as administrator
  • Use the following command and press Enter:
    sfc /scannow

Fix Corrupted System Files

  • Reboot your system
  • If SFC returned an error, then use the following command lines, pressing Enter after each:
    DISM /Online /Cleanup-Image /CheckHealth
    DISM /Online /Cleanup-Image /ScanHealth
    DISM /Online /Cleanup-Image /RestoreHealth

Method 2. Install Windows Updates

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.
  • Press the Windows key + R to open the Run box
  • Type ms-settings:windowsupdate in the text box and press Enter
  • Click the Check for Updates button

Install Windows Updates

  • If a new update is available, click the Download & Install all button.
  • Restart your computer after the process is finished and check to see if the problem is fixed

Method 3. Restart Windows Event Log Service

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.
  • Press the Windows key + R to open the Run dialog box
  • Type services.msc and hit Enter
  • Search for Windows Event Log service, right-click on it, and select Restart

Restart Windows Event Log Service

Method 4. Modify the Registry Editor

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.
  • Press the Windows key + R to open the Run dialog box
  • Type regedit and hit Enter
  • Navigate to the following path:

HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services > EventLog

Modify the Registry Editor

  • Right-click on Start in the right pane and select Modify
  • Set the Value Data as 1 and click on Ok to save the changes

Method 5. Delete Subkey for the DFSR Service

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.
  • Press the Windows key + R to open the Run dialog box
  • Type regedit and hit Enter
  • Navigate to the following path:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfsr\Restore

  • Now backup and delete the restore subkey
  • Once done, open Services and restart the DFS Replication Service
  • Restart your device

Method 6. Run System Restore

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.
  • Go to the Start menu, type restore, and click on Create a restore point
  • Click System Restore, then follow the prompts until you can select a restore point

Run System Restore

  • Select the one you want (ideally before the Event Log error 1108 started appearing) and go ahead with the process

Method 7. Perform a Repair Installation

Fix it now! Fix it now!
To repair damaged system, you have to purchase the licensed version of Reimage Reimage.
  • Visit the official Microsoft website to download Windows 11 Installation Media
  • Run the Media Creation Tool and select Create Installation Media for another PC
  • Select your USB drive
  • Let the Process complete of writing the Installation files to the USB drive
  • Click Finish
  • On the PC you wish to upgrade, Press Windows + E to open the File Explorer
  • Open the Removable drive and click Setup.exe

Perform a Repair Installation

  • Accept the license terms on the next screen
  • Confirm the Upgrade options – Files, apps and Settings are kept
  • Click Install, and the upgrade should start

Repair your Errors automatically

ugetfix.com team is trying to do its best to help users find the best solutions for eliminating their errors. If you don't want to struggle with manual repair techniques, please use the automatic software. All recommended products have been tested and approved by our professionals. Tools that you can use to fix your error are listed bellow:

Offer
do it now!
Download Fix
  Happiness
Guarantee
do it now!
Download Fix
  Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
Still having problems?
If you failed to fix your error using Reimage, reach our support team for help. Please, let us know all details that you think we should know about your problem.
Reimage - a patented specialized Windows repair program. It will diagnose your damaged PC. It will scan all System Files, DLLs and Registry Keys that have been damaged by security threats.Reimage - a patented specialized Mac OS X repair program. It will diagnose your damaged computer. It will scan all System Files and Registry Keys that have been damaged by security threats.
This patented repair process uses a database of 25 million components that can replace any damaged or missing file on user's computer.
To repair damaged system, you have to purchase the licensed version of Reimage malware removal tool.

Protect your online privacy with a VPN client

A VPN is crucial when it comes to user privacy. Online trackers such as cookies can not only be used by social media platforms and other websites but also your Internet Service Provider and the government. Even if you apply the most secure settings via your web browser, you can still be tracked via apps that are connected to the internet. Besides, privacy-focused browsers like Tor is are not an optimal choice due to diminished connection speeds. The best solution for your ultimate privacy is Private Internet Access – be anonymous and secure online.

 

Data recovery tools can prevent permanent file loss

Data recovery software is one of the options that could help you recover your files. Once you delete a file, it does not vanish into thin air – it remains on your system as long as no new data is written on top of it. Data Recovery Pro is recovery software that searchers for working copies of deleted files within your hard drive. By using the tool, you can prevent loss of valuable documents, school work, personal pictures, and other crucial files.

About the author
Gabriel E. Hall
Gabriel E. Hall - Passionate computer expert

Gabriel E. Hall is an expert troubleshooter who has been working in the information technology industry for years.

Contact Gabriel E. Hall
About the company Esolutions

References

What you can add more about the problem: "How to fix Event Log error 1108 (Microsoft Windows Security Auditing) in Windows? "