Windows 10: How do I apply Schema into Event viewer?

Hello , I have setup recently Netapp audit logs which are generated in evtx format. They are readable with Event viewer but not full:"The description for Event ID 4624 from source NetApp-Security-Auditing cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local co

:)

 

Error in Event Viewer

Hi,



Thank you for writing to Microsoft Community Forums.



As you have mentioned, you have performed a repair installation on the computer and you see Event 508, 510 and 533 in Event Viewer.



I would like to inform that if you see any critical error in Event Viewer, please share the event logs with us to help you with the appropriate troubleshooting steps. Please follow the steps mentioned below to share the event logs:

1. Press Windows + X from the keyboard, select
   Event Viewer.
   
2. Expand Windows Logs from the left pane and select
   Applications.
   
3. Click Filter Current Log from extreme right pane. Then in the new windows check the box beside
   Error and click OK.
   
4. Now, look for a critical Error in the list and note down the message/information from the
   General Tab in the lower section.
   

Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator

 

MS Event Schema Location - Resource has been removed etc..

Hi Sarah,

thank you very much for looking at this but I was looking for the Windows Event schema.

The link you posted is to the Message schema.

Thanks again,

 

Event Viewer problem with latest Windows Build 1607

After installing the new Windows build 1607, the Event Viewer stopped recording events under Diagnostic Performance. (Before 1607 I checked the files located under Windows.old dated 9/23/2016 and located this file which indeed did have a list of events
recorded.)

Since the initial 1607 download there have been two new builds automatically installed on my laptop.



The last step in an automatic download is the RESTART. Prior to my rebooting, I checked the Diagnostic Performance and for sure, these had the list of events.



Rebooting by me, causes the Diagnostic Performance errors to disappear.

As suggested earlier I have run the SFC/DISM commands with no errors reported.

Any Ideas?

Nancy