| Event Id | 23 |
| Source | Microsoft-Windows-WMI |
| Description | Event provider %1 attempted to register query "%2" %3 namespace which is too broad. Event providers cannot provide events that are provided by the system. The query will be ignored. Contact the application vendor. |
| Event Information | According to Microsoft : Cause : This event is logged when event provider attempted to register query namespace which is too broad. Resolution : Narrow the scope of the WQL query You can reduce the query scope of a WQL query by using a more restrictive WHERE clause. The query can be corrected by examining the event registration from the WMI Event Registration tool that comes as part of CIM Studio and by updating the permanent subscriptions for the listed provider and query. If the permanent subscription is created by using a MOF file that was included with an installed product, you must contact the application vendor to correct the faulty registration. Verify : Send events through the Event Provider that satisfies the Event Filter query in question and to verify that they were delivered successfully. |
| Reference Links | Event ID 23 from Source Microsoft-Windows-WMI |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.