I have an apparently common issue but didn't find a solution.
We have Oracle DB servers that write audit trail from DB to Windows event log (event id 34).
The servers with 2003 x86 and Oracle 9.2 record the message correctly.
The new servers run 2003 x64 with Oracle 11g and record the event log but with an initial error:
The description for Event ID ( 34 ) in Source ( Oracle.two ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: LENGTH : '140' ACTION : 'CONNECT' DATABASE USER: 'SYS' PRIVILEGE : 'SYSOPER' CLIENT USER: 'username' CLIENT TERMINAL: 'servername' STATUS: '0'
The message content comes anyway in the bottom but the first part prevents our Audit Trail server to read the event log correctly.
Is there any file that have to be given to Windows in order to interpret the message correctly?