| Previous | Next |
| ERROR_EVT_MESSAGE_NOT_FOUND | ERROR_EVT_UNRESOLVED_VALUE_INSERT |
ERROR_EVT_MESSAGE_ID_NOT_FOUND
No message identifier is available for the requested event text
Provider and event metadata expose numeric resource identifiers for provider names, channels, levels, tasks, opcodes, keywords and event messages. This error indicates that the formatting request cannot obtain the desired identifier from the metadata context. It is distinct from MESSAGE_NOT_FOUND, where an identifier exists but its resource-table entry is missing.
Inspect which EvtFormatMessage flag was requested and whether the corresponding metadata property is defined. Some manifest fields legitimately omit a localized message and use a symbolic name instead. If the event should have text, compare the installed event definition with the expected manifest and check whether the event ID and version select a different definition.
What to inspect
- Log the EvtFormatMessage flag and target metadata object.
- Check whether that manifest element actually defines a message attribute.
- Match the event ID and version to the correct metadata definition.
References
- Microsoft: EvtFormatMessage
- Microsoft: provider and event metadata
- Microsoft: reading event-definition metadata
- Microsoft: event definitions and insertion strings
Looking for a different code? Search another status or error code.