Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Description for event id from source cannot be found

When I write a log into windows event log, I get the event below, what's the root cause of this message, and how can I fix it? Many Thanks

The description for Event ID 51001 from source RRWS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

test log messge

the message resource is present but the message is not found in the string/message table

like image 998
Ji Yalin Avatar asked Aug 05 '10 07:08

Ji Yalin


People also ask

What is event ID 92?

According to Microsoft : Cause. This event is logged when Active Directory Certificate Services could not update security permissions.

What is event ID 300?

This event is created when Windows Hello for Business is successfully created and registered with Azure Active Directory (Azure AD). Applications or services can trigger actions on this event. For example, a certificate provisioning service can listen to this event and trigger a certificate request.

What is event ID 8003?

Event ID - 8003The client computer has attempted to promote itself to the master browser of the subnet and has failed because only one computer in a domain can be running as the master browser. User Action: Change the TCP/IP protocol configuration to the correct subnet mask.

How do you add a source to an event log?

To create an event source, you need to have a name for your new source (called the Event Source Name) and the name of the log where the event source will be a part. If the event log entries would be written to the standard “Application”, “System” or “Security” logs, then you can use that as the name of the log.


1 Answers

I got this error after creating an event source under the Application Log from the command line using "EventCreate". This command creates a new key under: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application

If you look at the Key that's been created (e.g. SourceTest) there will be a string value calledEventMessageFile, which for me was set to %SystemRoot%\System32\EventCreate.exe.

Change this to c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll

Delete theCustomSource and TypesSupported values.

This should stop the "The description for Event ID...." message.

like image 135
Matt Avatar answered Sep 20 '22 22:09

Matt