Print Page - Windows event log processing

Title: Windows event log processing
Post by: ditonet on July 29, 2016, 11:49:14 AM

Hello,

In general Windows event log processing work fine for me, but some event are not processed and NetXMS log says:
[DEBUG] LogWatch: Call to EvtFormatMessage failed: error 15027
or
[DEBUG] LogWatch: Call to EvtOpenPublisherMetadata failed

It looks that some event are incomplete (do not contain all fields properly filled) and NetXMS is unable to procces them.
Any ideas how to fix this?

Regards, Grzegorz.

Title: Re: Windows event log processing
Post by: Victor Kirhenshtein on August 02, 2016, 10:39:45 PM

Hi,

error 15027 means "the message resource is present but the message is not found in the string/message table". So application logs message with code that is not present in message table. It looks like a bug in some application.

Best regards,
Victor

Title: Re: Windows event log processing
Post by: ditonet on August 02, 2016, 11:42:13 PM

Thanks Victor,

I made some test, it looks that logged message is incomplete in some way as You wrote.
This is application bug, not NetXMS and I was looking for workaround.

Best regards, Grzegorz.

NetXMS Support Forum

English Support => General Support => Topic started by: ditonet on July 29, 2016, 11:49:14 AM