| Previous | Next |
| ERROR_EVT_EVENT_DEFINITION_NOT_FOUND | ERROR_EVT_VERSION_TOO_OLD |
ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND
The requested localized Event Log message resource is absent
EvtOpenPublisherMetadata and EvtArchiveExportedLog accept an LCID used to locate localized provider metadata and message strings. A provider can be correctly registered and still lack a particular language resource. The event record remains readable as XML; only the requested localized display strings are unavailable.
Retry with the caller or system locale only when fallback behavior is acceptable, and do not misdiagnose the event data as corrupt. Install the matching language resources for the provider or archive localized strings into exported logs before transferring them. When comparing systems, note that the provider binary version and installed language packs must both match.
What to inspect
- Record the LCID requested by the formatting call.
- Check installed provider language resources.
- Archive localized strings for EVTX files that must be portable.
References
- Microsoft: EvtOpenPublisherMetadata
- Microsoft: EvtFormatMessage
- Microsoft: archiving localized event resources
- Microsoft: formatting event messages
Looking for a different code? Search another status or error code.