If got a 1501 error when you try to start Event log service in windows operating system, there may be two reasons:
- Event log files can not be found
- Event log files are marked as read-only
Event log files are stored in the %systemroot%/system32/config directory and are named as AppEvent.evt, SecEvent.evt, SysEvent.Evt, etc. If any of these files are missing, you can try to copy them from another computer. Furthermore, you need to check that these files are writable.