WinSyslog Event ID 11158: Empty log-rotation queue file could not be deleted#

Answer#

The durable log-rotation queue contains no jobs, but the product could not delete its now-empty queue file. No queued rotation job is reported lost by this event.

Event details#

  • Event ID: 11158

  • Severity: Warning

  • Component: Log rotation queue

  • Windows Event Log source: AdisconWinSyslog

  • Available since: 26.07

  • Message pattern: Could not delete empty log rotation queue file: {queue_path}

Possible causes#

  • The queue file is locked by another process.

  • The service account lacks delete permission in the data directory.

  • Antivirus, backup, or storage software is holding the file.

Immediate checks#

  1. Confirm that the queue file is empty and preserve its metadata.

  2. Check file locks and delete permission in the product data directory.

  3. Remove the blocking condition and let the subsystem retry cleanup.

Detailed procedures#

Verify the result#

Confirm that the empty queue file is removed or recreated normally and Event ID 11158 stops recurring.

Evidence to collect#

  • The complete Windows Application Event Log entry and neighboring product events from the same time window.

  • The exact product version, affected service or action name, and event timestamp with time zone.

  • The affected configuration object and a bounded debug log covering one controlled reproduction.

  • Remove passwords, tokens, license data, private keys, message payloads, personal data, and customer-identifying names, addresses, hostnames, domains, and network addresses before sharing evidence.

Escalation#

If the event continues after the detailed procedures, collect the listed evidence and contact Adiscon Support.