| Event Id | 1009 |
| Source | Microsoft-Windows-Diagnosis-PLA |
| Description | Performance Logs & Alerts upgrade failed with error code %1. |
| Event Information | According to Microsoft : Cause : This event is logged when the performance Logs & Alerts upgrade failed with error code. Resolution : Address the migration failure Data Collector Sets might fail to be migrated for a number of reasons. Reimport the Data Collector Set with the required corrections to resolve the error. Reimport a Data Collector Set You can reimport a Data Collector Set by running the following command from an elevated command prompt: logman import Reimport a Data Collector Set to run as a different user The most common reason for failure is invalid credentials (for example, outdated credentials). To reimport a Data Collector Set that should run as a specific user, run the following command from an elevated command prompt: logman import Delete reimported Data Collector Sets from PLA's Recover directory After successfully reimporting a failed Data Collector Set, you should delete it from PLA's Recover directory. You can do this by running the following command from an elevated command prompt: del "%windir%\PLA\Recover\ Re-run the upgrade manually If the above manual migration does not work properly, consider trying to re-run the upgrade manually by running the following command from an elevated command prompt: %windir%\system32\rundll32.exe %windir%\system32\pla.dll Verify : Ensure that the folder %windir%\PLA\Recover is empty and that running the following command from a command prompt with elevated privileges does not list any entries: logman query legacy\* |
| Reference Links | Event ID 1009 from Source Microsoft-Windows-Diagnosis-PLA |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.