KiWi Syslog Server Failing to Log Events

Version: 9.x

Explanation:

In at least one case, after upgrade to KiWi Syslog Server 9.x, the client path to logging resources did not correctly point to \Windows\system32\KiwiEventlog.dll, preventing the processing of log data. In place of event details you see a generic message:

“The description for Event ID (1) in Source (Kiwi Syslog Server ) Cannot be found. The local computer may not have necessary registry information or message dlll files to display messages from a remote computer... “

Resolution:

To restore normal logging:

Open Regedit from the Run line.
Locate this key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Kiwi Syslog Server
Within the key verify and, if needed, correct these assignments:

"EventMessageFile"="C:\Windows\system32\KiwiEventlog.dll"

"CategoryMessageFile"="C:\Windows\system32\KiwiEventlog.dll"

"CategoryCount"=dword:00000019

"TypesSupported"=dword:00000007

Note: The following text can be copied to a .reg file and imported into the registry:

==============

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Kiwi Syslog Server]

"EventMessageFile"="C:\\Windows\\system32\\KiwiEventlog.dll"

"CategoryMessageFile"="C:\\Windows\\system32\\KiwiEventlog.dll"

"CategoryCount"=dword:00000019

"TypesSupported"=dword:00000007

==============

No related articles were found.

Attachments

No attachments were found.

Visitor Comments

No visitor comments posted. Post a comment

Post Comment for "KiWi Syslog Server Failing to Log Events"

If this article does not provide the solution you need, please consider visiting our community forums on thwack or contacting SolarWinds Support. Please use the following form to provide comments that help us improve this KB article. Fields marked with an asterisk are required.