This article describes the issue when you receive the following prompt when using SolarWinds Log Forwarder but displaying correct information:
FormatMessage failed with error 1815 using Solarwinds log forwarder.
Log Forwarder version 1.1.2
This is a locale related issue. Log Forwarder is getting wrong Language ID from OS and that blocks Log Forwarder to decode the event from Event log. The permanent solution is to allow the customer to configure the Local Language ID.
Another workaround is to use log forwarder version 1.1.19.