[BUG] [LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033.

[bobsira]

Describe the bug Getting the following errors when running LogMonitor in a container

[2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 122. [2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033. [2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033. [2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033. [2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033. [2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033. [2023-08-07T14:33:10.000Z][LOGMONITOR] WARNING: Failed to render event log event. The event will not be processed. Error: 15033.

To Reproduce Steps to reproduce the behavior: Build image using mcr.microsoft.com/dotnet/framework/runtime:4.8 base image Set ENTRYPOINT C:\LogMonitor\LogMonitor.exe ... Launch container Observe STDOUT for LOGMONITOR exceptions

Expected behavior Log Event Log channels events without warnings/failures

Configuration Container image mcr.microsoft.com/dotnet/framework/runtime:4.8 Running latest Docker Desktop on Windows 10 22H2 LogMonitor v2.0 with example .json config from this repo

[profnandaa]

@bobsira -- can add the details of the config file you are using?

[bobsira]

Dockerfile

FROM mcr.microsoft.com/dotnet/framework/runtime:4.8

WORKDIR /LogMonitor
COPY LogMonitorConfig.json .
COPY LogMonitor.exe .

ENTRYPOINT C:\LogMonitor\LogMonitor.exe

LogMonitorConfig.json

{
  "LogConfig": {
    "sources": [
      {
        "type": "EventLog",
        "startAtOldestRecord": true,
        "eventFormatMultiLine": false,
        "channels": [
          {
            "name": "system",
            "level": "Information"
          },
          {
            "name": "application",
            "level": "Error"
          }
        ]
      }
    ]
  }
}

[norcis]

The issue is the event log item contains "%2f" and doesn't get sent to stdout.