| Event Id | 21 |
| Source | Microsoft-Windows-WMI |
| Description | Event provider %1 attempted to register a syntactically invalid query "%2". The query will be ignored. The query can be corrected by examining the WMI repository with CIM studio and updating the permanent subscriptions for the listed provider and query. If the permanent suscription is created with MOF file coming with an installed product, the application vendor must be contacted to correct the faulty registration. |
| Event Information | According to Microsoft : Cause : This event is logged when event provider attempted to register a syntactically invalid query. Resolution : Update permanent event subscriptions To correct the query, examine the event registration by using the WMI Event Registration tool included with CIM Studio and updating the permanent subscriptions for the listed provider and query. If the permanent subscription was created by a MOF file included with an installed product, you must contact the application vendor to correct the faulty registration. Verify : Send events through the Event Provider that satisfies the Event Filter query in question and to verify that they were delivered successfully. |
| Reference Links | Event ID 21 from Source Microsoft-Windows-WMI |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.