Unable to update EventLog information in registry.

Microsoft.MSMQ.6.2.Rule.Alert.Event2214 (Rule)

Knowledge Base article:

Summary

Unable to update EventLog information in registry

Resolutions

A registry key may not be registered properly. Uninstall and then reinstall Message Queuing triggers.

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Uninstall and reinstall Message Queuing triggers (Windows 7)

To uninstall Message Queuing triggers:

To install Message Queuing triggers:

Uninstall and reinstall Message Queuing triggers (Windows Server 8)

To uninstall Message Queuing triggers:

To install Message Queuing triggers:

If you continue to get this error, note any details in the event message, and then contact Microsoft Customer Service and Support (CSS). For information about how to contact CSS, see Enterprise Support ( http://go.microsoft.com/fwlink/?LinkId=52267).

Additional

For more information, see Event ID 2214 ( http://technet.microsoft.com/en-us/library/dd338557(WS.10).aspx)

Element properties:

TargetMicrosoft.MSMQ.6.2.Triggers
CategoryConfigurationHealth
EnabledFalse
Event_ID2214
Event SourceMSMQ Triggers Cluster Resource DLL
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Unable to update EventLog information in registry.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.MSMQ.6.2.Rule.Alert.Event2214" Enabled="false" Target="Microsoft.MSMQ.6.2.Triggers" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>ConfigurationHealth</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>MSMQ Triggers Cluster Resource DLL</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>2214</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.MSMQ.6.2.Rule.Alert.Event2214.AlertName"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>