Event ID 100 — Provider configuration
Applies To: Windows Server 2008
.jpg)
An event provider usually corresponds one-to-one to a component or an application, although it is possible for a single application to register multiple providers. Each provider registration informs the system where the resources associated with the provider are found. The resources contain the set of events that the provider can publish, metadata related to these events, and readable descriptions of the events, which are localized to various languages (depending on the OS installation).
When the providers are not registered correctly, the Event Log service will not be able to find some of the resources associated with the provider. When this happens the provider will not be able to publish its events, or the description associated with the events will not display correctly when the event is viewed.
Each event contains the name of the provider that published the event. The registration information about that provider can be obtained by typing the following at the command line:
wevtuitl gp providerName
In the command above, providerName should be replaced by the name of the provider as it appears in the event.
Event Details
| Product: | Windows Operating System |
| ID: | 100 |
| Source: | Microsoft-Windows-Eventlog |
| Version: | 6.0 |
| Symbolic Name: | EVENT_PROCESSING |
| Message: | The event logging service encountered an error while processing an incoming event published from %3. |
Diagnose
Events 100, 102, 1107, and 1108 indicate that there is a problem with the event provider registration.
Event 100 and 1108 can be resolved by resinstalling the event provider. Contact the vendor that developed the event provider to reinstalling the provider does not fix the problem.
Events 102 and 1107 can only be fixed by contacting the vendor that developed the event provider and informing them of the problem.
Resolve
To resolve this issue, use the resolution that corresponds to the cause you identified in the Diagnose section. After performing the resolution, see the Verify section to confirm that the feature is operating properly
Cause |
Resolution |
|---|---|
Corrupted Provider Registration |
Reinstall event publisher software |
Incorrect Provider Registration |
Contact the software vendor |
Reinstall event publisher software
Reinstall the software that attempted to publish events.
Contact the software vendor
Contact the vendor of the program to report the problem. The new version of the software must be installed.
Verify
The problem can only be resolved by reinstalling the software that generates events (possibly after obtaining a new version from the vendor). The verification that the problem is solved involves causing the events to be published again and verifying that they have been published correctly in the event log. To do this, run the application that caused the events and using the Event Viewer to read the event log where the events are published.