ORA-28056: Writing audit records to Windows Event Log failed

一、sqlplus / as sysdba
ERROR:
ORA-28056: Writing audit records to Windows Event Log failed
OSD-6557744: Message 6557744 not found; product=RDBMS; facility=SOSD
O/S-Error: (OS 1717) ???
ORA-01075: you are currently logged on
二、alert.log
MMNL started with pid=16, OS id=2720
starting up 1 dispatcher(s) for network address ‘(ADDRESS=(PARTIAL=YES)(PROTOCOL=TCP))’…
starting up 1 shared server(s) …
ORACLE_BASE from environment = D:\app\Administrator
Mon May 18 12:41:36 2020
AUD: OS Error = 1717 encountered while writing audit record
Mon May 18 13:59:35 2020
AUD: OS Error = 1717 encountered while writing audit record
AUD: OS Error = 1717 encountered while writing audit record
三、计算机管理–服务–windows event log 服务启动失败
四、解决windows 系统无法启动windows event log 服务
windows 系统无法启动windows event log 服务
关键词：无法启动系统事件日志
尝试解决步骤
【1】权限：把如图中logsfile文件等都给local service
【2】把C:\Windows\System32\winevt\Logs下面的文件全部移走到其他文件夹，再启动服务试试看
【3】清了2遍日志，终于可以了
五、将计算机管理–服务–oracle服务只保留实例和监听的，其他的oracle服务都停止，重启服务器后解决