Event ID 501 — Publishing Events

Applies To: Windows Server 2008

The function of the Event Collector service is to receive events from event sources, which are remote Windows computers, and to publish these events into a local event log. The ability to save the events depends on the settings for the Event Log service.

Event Details

Product: Windows Operating System
ID: 501
Source: Microsoft-Windows-EventCollector
Version: 6.0
Symbolic Name: EVTCOLL_SUBSCRIPTION_EVENTLOST
Message: The Subscription %1 has a lost event. An event from target machine %2 is lost and could not be delivered. Error Code is %3. Event data is:%4

Resolve

Fix Event Tracing for Windows (ETW) errors

There is a problem with the Event Tracing for Windows (ETW) component of the operating system, and it must be resolved for the Event Collector service to be able to publish events.

Verify

Restart the local computer and then use the Event Viewer to read the System event log. Verify that there are no new events with an event identifier equal to 6 or 501 that were logged after the computer was restarted.

Publishing Events

Management Infrastructure