Windows error 15000 (ERROR_EVT_INVALID_CHANNEL

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: the supplied Event Log channel path is not a valid registered channel name.

Previous	Next
ERROR_SXS_FILE_HASH_MISSING	ERROR_EVT_INVALID_QUERY

ERROR_EVT_INVALID_CHANNEL_PATH

The channel path cannot be parsed as an Event Log channel name

Windows Event Log addresses a live channel by its registered name, not by a display label or an arbitrary file-system path. Manifest-defined channel names are URI-like identifiers and have naming restrictions, including a maximum length and forbidden characters. A malformed path can therefore fail before the service looks for a matching channel.

Compare the exact string passed to EvtQuery, EvtSubscribe or EvtOpenChannelConfig with the names returned by channel enumeration or by wevtutil. Do not replace the registered path with the localized name shown by Event Viewer. If the input is intended to be an exported log file, use the log-file flag and a real EVTX path instead of a channel operation.

What to inspect

Enumerate registered channels and copy the exact channel path.
Verify whether the API call expects a live channel or an EVTX file.
Check generated configuration for illegal characters or accidental whitespace.

References

Looking for a different code? Search another status or error code.