Provider configuration
Applies To: Windows Server 2008
An event provider usually corresponds one-to-one to a component or an application, although it is possible for a single application to register multiple providers. Each provider registration informs the system where the resources associated with the provider are found. The resources contain the set of events that the provider can publish, metadata related to these events, and readable descriptions of the events, which are localized to various languages (depending on the OS installation).
When the providers are not registered correctly, the Event Log service will not be able to find some of the resources associated with the provider. When this happens the provider will not be able to publish its events, or the description associated with the events will not display correctly when the event is viewed.
Each event contains the name of the provider that published the event. The registration information about that provider can be obtained by typing the following at the command line:
wevtuitl gp providerName
In the command above, providerName should be replaced by the name of the provider as it appears in the event.
Events
| Event ID | Source | Message |
|---|---|---|
Microsoft-Windows-Eventlog |
The event logging service encountered an error while processing an incoming event published from %3. | |
Microsoft-Windows-Eventlog |
The event logging service encountered an error while processing an incoming event from publisher %3 and trying to process the metadata for it. |