Hello,
i have a script that write events to a log. works well but for severaldays the parameter /f:RenderedXML produced a error message:
Failed to render event. Event handle = 0x00000005.. Error=87
here my command:
wevtutil qe ForwardedEvents "/q:*[System[(EventID=1116)]]" /f:RenderedXML /rd:true /c:1
the problem when i use the parameter /f:Text i have an empty message/decription field.
the same command works with other event ID's
regards
Max