Event ID 501 — Publishing Events
Applies To: Windows Server 2008
The function of the Event Collector service is to receive events from event sources, which are remote Windows computers, and to publish these events into a local event log. The ability to save the events depends on the settings for the Event Log service.
Event Details
Product: | Windows Operating System |
ID: | 501 |
Source: | Microsoft-Windows-EventCollector |
Version: | 6.0 |
Symbolic Name: | EVTCOLL_SUBSCRIPTION_EVENTLOST |
Message: | The Subscription %1 has a lost event. An event from target machine %2 is lost and could not be delivered. Error Code is %3. Event data is:%4 |
Resolve
Fix Event Tracing for Windows (ETW) errors
There is a problem with the Event Tracing for Windows (ETW) component of the operating system, and it must be resolved for the Event Collector service to be able to publish events.
Verify
Restart the local computer and then use the Event Viewer to read the System event log. Verify that there are no new events with an event identifier equal to 6 or 501 that were logged after the computer was restarted.