We have two connectors based on "windows2k8_EVTAPI" integration. They were working fine until a few days back when the agent log files started filling up with the following message:
ERROR :: [EvtApiSource:ExecuteQuery] EvtNext failed with status code6
ERROR :: EvtFormatMessage failed: could not get message string
I could see events coming in but stripped of a lot of useful information.
I restarted the agents and connectors and it appeared to be working again.
But after sometime the error recurred.
Any ideas what might be causing this?