Hi everyone,
i've had a problem for a while with NTEVL probe to detect a specific event in the system log. From the logs I get the following:
Sep 15 06:18:04:213 [4524] ntevl: getPublisherHandleandStoreinHash:EvtOpenPublisherMetadata failed with error:2Sep 15 06:18:04:213 [4524] ntevl: (ProcessEvent) OpenPublisherMetadata failed for Publisher: "gupdate"Sep 15 06:18:04:213 [4524] ntevl: updateRecord called Application 280015Sep 15 06:18:04:213 [4524] ntevl: RecordHandler - log=0, count=0, number=280015Sep 15 06:18:04:213 [4524] ntevl: Event excluded:informational :Application: 280015Sep 15 06:18:04:213 [4524] ntevl: EvtFormatMessage failed: message or message id not foundSep 15 06:18:04:213 [4524] ntevl: Error getting Task category for event DETAILS: Publisher: Service Control Manager EventID: 7036Sep 15 06:18:04:213 [4524] ntevl: Level is :InformationIs any of you have had this issue with the probe ?
here is the configuration in UIM
Thank you for you help !!!
------------------------------
Philippe-Andre Trottier
[JobTitle]
[CompanyName]
Montreal,Quebec
------------------------------