How to read Enterprise Vault (EV) Event log messages on a computer that does not have EV installed

Problem

Sometimes it may be necessary to read EV Event log details on a machine that does not have EV installed.

Error Message

On computers which do not have the EV DLL registered properly, the following generic message is shown

The description for Event ID ( xxxx ) in Source ( Enterprise Vault ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:

Solution

 In order to read the full text properly for the read EV Event log, perform the following:

1.   On a system with EV installed, locate VaultMessages.dll (by default in C:\Program Files\Enterprise Vault\) on the EV Server
2.   Copy Vaultmessages.dll to the new computer or workstation
3.   Open the Command prompt by clicking on Start | Run | Type in CMD | press Enter <Return key>
4.   Run the following command to register this dll on the secondary computer or workstation:

regsvr32.exe "C:\<FilePath>\VaultMessages.dll

Note: Replace <FilePath> with folder path of dll location.