Submit a ticketCall us

Training Class Getting Started with SolarWinds Backup - February 28

This course offers customers an introduction to SolarWinds Backup, focusing on configuring the backup technology, taking backups, data restoration and data security. It is a great primer and will get you up to speed quickly on SolarWinds Backup.
Register for class.

Home > Success Center > Archive > 2017December13 - Deletes > Events with 0% as the message shows NULL in the Real-Time Event Log Viewer

Learn more about page titles
Events with 0% as the message shows NULL in the Real-Time Event Log Viewer

Updated: September 15, 2016

Overview

When viewing Event Logs from a monitor Windows Workstation/Server using the Real-Time Event Log Viewer, a message which displays "0%" on the Windows Machine reports as NULL via the viewer in SAM.

 

View from SAM:

 

View from Windows Server:

 

Environment

  • All versions of SAM

 

Cause 

This is caused by a WMI not providing the details of the Event Log Message.

 

Resolution

 

  1. Run > wbemtest.
  2. Connect > Connect.
  3. Enter query:

SELECT *
FROM Win32_NTLogEvent
WHERE (LogFile = 'Application') AND (EventCode = 1)

Now you should see the Event Logs populating

   4. Double-click into one of the Event Logs.

   5. Scroll down and find message for the Event Log that's causing the issue "Message" will show "<null>". However, for other event logs, you will see the full message display:

 

 

Last modified

Tags

Classifications

Public