Windows Event Log Error Constants
Header: winerror.h
The following are the error codes that Windows Event Log defines.
| Symbolic | Code | Description |
|---|---|---|
| ERROR_EVT_INVALID_CHANNEL_PATH | 15000 | The specified channel path is not valid. |
| ERROR_EVT_INVALID_QUERY | 15001 | The specified query is not valid. |
| ERROR_EVT_PUBLISHER_METADATA_NOT_FOUND | 15002 | The provider metadata cannot be found in the resource. |
| ERROR_EVT_EVENT_TEMPLATE_NOT_FOUND | 15003 | The template for an event definition cannot be found in the resource. |
| ERROR_EVT_INVALID_PUBLISHER_NAME | 15004 | The specified provider name is not valid. |
| ERROR_EVT_INVALID_EVENT_DATA | 15005 | The event data raised by the provider is not compatible with the event template definition in the provider's manifest. |
| ERROR_EVT_CHANNEL_NOT_FOUND | 15007 | The specified channel cannot be found. Check the channel configuration. |
| ERROR_EVT_MALFORMED_XML_TEXT | 15008 | The specified XML text was not well-formed. For more information, call the [**EvtGetExtendedStatus**](/windows/desktop/api/WinEvt/nf-winevt-evtgetextendedstatus) function. |
| ERROR_EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL | 15009 | You cannot subscribe to an Analytic or Debug channel; the events for an Analytic or Debug channel go directly to a log file and cannot be subscribed to. |
| ERROR_EVT_CONFIGURATION_ERROR | 15010 | A configuration error occurred. |
| ERROR_EVT_QUERY_RESULT_STALE | 15011 | The query result is not valid. This may be due to the log being cleared or rolling over after the query result was created. Release the query result object and reissue the query. |
| ERROR_EVT_QUERY_RESULT_INVALID_POSITION | 15012 | The cursor for the query result is not pointing to a valid position. |
| ERROR_EVT_NON_VALIDATING_MSXML | 15013 | The registered MSXML parser does not support validation. |
| ERROR_EVT_FILTER_ALREADYSCOPED | 15014 | An expression can be followed by a change of scope operation only if the expression evaluates to a node set and is not already part of some other change of scope operation. |
| ERROR_EVT_FILTER_NOTELTSET | 15015 | Cannot perform a step operation from a term that does not represent an element set. |
| ERROR_EVT_FILTER_INVARG | 15016 | The arguments on the left side of a binary operator must be either attributes, nodes, or variables, and the arguments on the right side must be constants. |
| ERROR_EVT_FILTER_INVTEST | 15017 | A step operation must involve either a node test or, in the case of a predicate, an algebraic expression against which to test each node in the node set identified by the preceding node set can be evaluated. |
| ERROR_EVT_FILTER_INVTYPE | 15018 | This data type not supported. |
| ERROR_EVT_FILTER_PARSEERR | 15019 | A syntax error occurred at the specified position. |
| ERROR_EVT_FILTER_UNSUPPORTEDOP | 15020 | This operator is unsupported by this implementation of the filter. |
| ERROR_EVT_FILTER_UNEXPECTEDTOKEN | 15021 | The token encountered was unexpected. |
| ERROR_EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL | 15022 | The requested operation cannot be performed over an enabled Analytic or Debug channel. You must disable the channel before performing the requested operation. |
| ERROR_EVT_INVALID_CHANNEL_PROPERTY_VALUE | 15023 | The channel property contains a value that is not valid. The value's type may not be valid, the value may be out of range, or the value cannot be updated or is not supported for this type of channel. |
| ERROR_EVT_INVALID_PUBLISHER_PROPERTY_VALUE | 15024 | The provider property contains a value that is not valid. The value's type may not be valid, the value may be out of range, or the value cannot be updated or is not supported for this type of provider. |
| ERROR_EVT_CHANNEL_CANNOT_ACTIVATE | 15025 | The channel failed to activate. |
| ERROR_EVT_FILTER_TOO_COMPLEX | 15026 | The XPath expression exceeded supported complexity. Simplify the expression or split it into two or more simple expressions. |
| ERROR_EVT_MESSAGE_NOT_FOUND | 15027 | The message resource is present, but the message is not found in the string or message table. |
| ERROR_EVT_MESSAGE_ID_NOT_FOUND | 15028 | The message identifier cannot be found. |
| ERROR_EVT_UNRESOLVED_VALUE_INSERT | 15029 | The substitution string for the insert index cannot be found. |
| ERROR_EVT_UNRESOLVED_PARAMETER_INSERT | 15030 | The description string for parameter reference (%1) cannot be found. |
| ERROR_EVT_MAX_INSERTS_REACHED | 15031 | The maximum number of replacements has been reached. |
| ERROR_EVT_EVENT_DEFINITION_NOT_FOUND | 15032 | The event definition cannot be found for the event identifier. |
| ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND | 15033 | The locale-specific resource for the desired message is not present. |
| ERROR_EVT_VERSION_TOO_OLD | 15034 | The resource is too old to be compatible. |
| ERROR_EVT_VERSION_TOO_NEW | 15035 | The resource is too new to be compatible. |
| ERROR_EVT_CANNOT_OPEN_CHANNEL_OF_QUERY | 15036 | The channel at the specified index of the query cannot be opened. |
| ERROR_EVT_PUBLISHER_DISABLED | 15037 | The provider has been disabled and its resources are not available. This can occur when the provider is uninstalled or upgraded. |
| ERROR_EVT_FILTER_OUT_OF_RANGE | 15038 | Attempted to create a numeric type that is outside of its valid range. |
| 38 entries | ||
Article text from the Win32 documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.