| Previous | Next |
| ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND | ERROR_EVT_VERSION_TOO_NEW |
ERROR_EVT_VERSION_TOO_OLD
The provider resource is older than the Event Log consumer supports
Provider metadata and message resources are compiled artifacts, not free-form text files. The Event Log runtime validates their version before using event definitions and formatting data. This code indicates that the resource found at the registered path is too old for the operation, often because an upgrade left an obsolete DLL or executable behind.
Compare file version, product version, manifest registration and architecture with a known-good installation. Reinstall the complete provider package instead of copying only a manifest or message DLL. If the failure occurs only while reading an old exported log, use metadata archived with that log or a compatible provider installation in an isolated analysis environment.
What to inspect
- Identify the exact resource file loaded for the publisher.
- Compare manifest and resource versions as a deployment unit.
- Avoid replacing only one component of the provider package.
References
- Microsoft: provider resources and parameter files
- Microsoft: EvtOpenPublisherMetadata
- Microsoft: provider and event metadata
- Microsoft: wevtutil channel and publisher diagnostics
Looking for a different code? Search another status or error code.