Provider configuration

Applies To: Windows Server 2008

An event provider usually corresponds one-to-one to a component or an application, although it is possible for a single application to register multiple providers. Each provider registration informs the system where the resources associated with the provider are found. The resources contain the set of events that the provider can publish, metadata related to these events, and readable descriptions of the events, which are localized to various languages (depending on the OS installation).

When the providers are not registered correctly, the Event Log service will not be able to find some of the resources associated with the provider. When this happens the provider will not be able to publish its events, or the description associated with the events will not display correctly when the event is viewed.

Each event contains the name of the provider that published the event. The registration information about that provider can be obtained by typing the following at the command line:

wevtuitl gp providerName

In the command above, providerName should be replaced by the name of the provider as it appears in the event.

Events

Event ID Source Message

100

Microsoft-Windows-Eventlog

The event logging service encountered an error while processing an incoming event published from %3.

102

Microsoft-Windows-Eventlog

The event logging service encountered an error while processing an incoming event from publisher %3 and trying to process the metadata for it.

Event Providers

Management Infrastructure