When attempting to use the ReadEventLog component in Workflow to read the Forwarded Events log it does not work.
When attempting to read the Forwarded Events log using the ReadEventLog component a stacktrace is returned that reads in part, "The Event Log 'Forwarded Events' on computer '.' does not exist."
The ReadEventLog component checks the registry to determine where the specified event log file exists. This check is done in HKLM\System\CurrentControlSet\services\eventlog. As the Forwarded Events log is not defined in the registry the ReadEventLog component cannot read this log.
The component is currently working as designed.
Workflow 7.0 Workflow 7.1
Imported Document ID: TECH164332
Subscribing will provide email updates when this Article is updated. Login is required.