<![CDATA[Windows event log processing]]>Hello,

In general Windows event log processing work fine for me, but some event are not processed and NetXMS log says:
[DEBUG] LogWatch: Call to EvtFormatMessage failed: error 15027
or
[DEBUG] LogWatch: Call to EvtOpenPublisherMetadata failed

It looks that some event are incomplete (do not contain all fields properly filled) and NetXMS is unable to procces them.
Any ideas how to fix this?

Regards, Grzegorz.

]]>https://forum.netxms.org/topic/4614/windows-event-log-processingRSS for NodeFri, 13 Nov 2026 08:37:21 GMTFri, 29 Jul 2016 08:49:14 GMT60<![CDATA[Reply to Windows event log processing on Tue, 02 Aug 2016 20:42:13 GMT]]>Thanks Victor,

I made some test, it looks that logged message is incomplete in some way as You wrote.
This is application bug, not NetXMS and I was looking for workaround.

Best regards, Grzegorz.

]]>https://forum.netxms.org/post/20527https://forum.netxms.org/post/20527Tue, 02 Aug 2016 20:42:13 GMT<![CDATA[Reply to Windows event log processing on Tue, 02 Aug 2016 19:39:45 GMT]]>Hi,

error 15027 means "the message resource is present but the message is not found in the string/message table". So application logs message with code that is not present in message table. It looks like a bug in some application.

Best regards,
Victor

]]>https://forum.netxms.org/post/20524https://forum.netxms.org/post/20524Tue, 02 Aug 2016 19:39:45 GMT