Steps to Reproduce: When collector EventID 1111 record, it produce“The system cannot find message text for message number 1111 in the message file for C:\WINDOWS\System32\ws03res.dll.”
For the same event log record with the error (using the the record number to ensure they are the same), could you please share what the Windows Event Viewer shows for this record? And what splunk shows for the record?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.