| Event Id | 5600 |
| Source | Microsoft-Windows-WMI |
| Description | The WMI Service detected an inconsistency with the WMI repository in the directory %windir%\system32\wbem\repository and was not able to recover it. The WMI repository will now be deleted, A new repository will be created based on the auto-recovery mechanism. |
| Event Information | According to Microsoft : Cause : This event is logged when the WMI Service detected an inconsistency with the WMI repository in the directory %windir%\system32\wbem\repository and was not able to recover it. Resolution : Rely on automatic recovery of WMI repository No resolution steps are required. WMI will attempt to rebuild the WMI Repository by using the auto-recovery mechanism. Verify : To verify that the WMI repository is in a consistent state, at a command prompt window type winmgmt /verifyrepository . If the repository is consistent, the following message will be displayed: "WMI repository is consistent". Also, the ERRORLEVEL environment variable will be set to zero (0), which you can check by typing echo %errorlevel% . |
| Reference Links | Event ID 5600 from Source Microsoft-Windows-WMI |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.