| Previous | Next |
| ERROR_EVT_FILTER_INVTYPE | ERROR_EVT_FILTER_UNSUPPORTEDOP |
ERROR_EVT_FILTER_PARSEERR
The XPath filter has a positional syntax error
This code is the parser-level form of an invalid filter and normally carries a character offset in the associated diagnostic. Typical causes include unmatched brackets or parentheses, incomplete operators, missing quotes, and malformed location steps. It is narrower than a well-formedness error in QueryList XML: the XML wrapper may be valid while the XPath text inside it is not.
Retrieve EvtGetExtendedStatus immediately and map its position back to the unescaped XPath string, not merely to a pretty-printed configuration file. XML entity expansion can make offsets appear different from the source template. Test the exact string supplied to EvtQuery or EvtSubscribe and reduce compound predicates around the indicated token.
What to inspect
- Record the final XPath after configuration substitution and XML decoding.
- Use the extended-status character position.
- Check matching quotes, brackets and parentheses near that position.
References
Looking for a different code? Search another status or error code.