How to configure event subscription to pull BMC SEL events into the event logs in Windows Server 2008

How to configure event subscription to pull BMC SEL events into the event logs in Windows Server 2008

Article ID : 950257
Last Review : March 27, 2008
Revision : 1.0
On This Page


This article describes how to configure event subscription to pull the base management controller (BMC) System Event Log (SEL) events into the event logs in Windows Server 2008.

Back to the top


In Windows Server 2008, Hardware Management is built into the operating system. By default, Hardware Management event subscription is not configured to subscribe to BMC SEL events. Instead of using a third-party program to view SEL events, you can configure Hardware Management to subscribe to SEL events. You can then view BMC SEL events in Event Viewer. To subscribe to SEL events, follow these steps:

1. Start Notepad.
2. Copy the following XML code, and then paste it into Notepad.

<Subscription xmlns=>	<Description>System Event Log event subscription</Description>	<SubscriptionId>SELSubscription</SubscriptionId>	<Uri></Uri>	<EventSources>		<EventSource>			<Address>localhost</Address>		</EventSource>	</EventSources>	<LogFile>HardwareEvents</LogFile>	<Delivery Mode=pull>		<PushSettings>			<Heartbeat Interval=10000 />		</PushSettings>	</Delivery></Subscription>

3. In Notepad, click Save as.
4. In the Save as type box, click All files in the File name box, type SELSubscription.xml, and then click Save.
5. Exit Notepad.
6. Use elevated user rights to open a command prompt.
7. At the command prompt, type the following commands, and then press ENTER after each command:

Wecutil qc
Winrm qc
Winrm set winrm/config/client @{TrustedHosts=”localhost”}
Wecutil cs path SELSubscription.xml

Note path represents the directory path of the SELSubscription.xml file that you saved in step 4.

After you complete the subscription, events from the SEL logs should populate the event log in Windows. You can view the events in Event Viewer under the following node:

Applications and Services Hardware events

Back to the top

How to determine whether a computer’s BIOS supports BMC detection

For SEL events to be logged, the computer’s BIOS must support using the Advanced Configuration and Power Interface (ACPI) for BMC detection. After you configure event subscription, you may see the following errors in the subscription status. These errors may occur if the computer does not have a BMC or if the BIOS does not support using ACPI for BMC detection.

[localhost] - Error - Last retry time: 5/22/2007 1:39:32 PM. Code (0x80041001):<f:ProviderFault provider=SEL plugin for Windows Remote Management path=%systemroot% system32 WsmSelPl.dllxmlns:f=></f:ProviderFault> Next retry time: 5/22/2007 1:44:32 PM.

To view the subscription status, follow these steps:

1. Use elevated user rights to open a command prompt.
2. Type eventvwr, and then press ENTER.
3. In the navigation pane, click Subscription. The details pane displays the SELSubscription entry.
4. Right-click SELSubscription, and then click Runtime Status.

To verify that a computer’s BIOS supports using ACPI for BMC detection, you can use the Windows Management Instrumentation (WMI) Tester tool. To do this, follow these steps:

1. Use elevated user rights to open a command prompt.
2. Type wbemtest.exe, and then press ENTER.
3. Click Connect.
4. To connect to the WMI namespace, type root wmi in the uppermost box, and then click Connect.
5. Under IWbemServices, click Enum Instances.
6. In the Enter Superclass Name box, type Microsoft_IPMI, and then click OK.
7. In the Query Result dialog box, you should see an instance of a device ID that begins with the ACPI entry.

If there is no entry that begins with ACPI, the BIOS does not support using ACPI for BMC detection. BIOS support for using ACPI for BMC detection is required for Intelligent Platform Management Interface (IPMI) drivers in Windows Server 2008 and in later versions of Windows Server. You must upgrade the BIOS if you want IPMI support.

Back to the top


The IPMI server management system is defined by Intel together with a group of companies that includes Dell, Hewlett-Packard (HP), and NEC. IPMI provides server monitoring and management features.

In Windows Server 2003 R2, Hardware Management is an optional component. However, after it is installed, Hardware Management automatically configures event subscription to pull SEL into the Windows event logs. In Windows Server 2008, subscription does not occur automatically.

Back to the top


For more information about the Event Collector service, visit the following Microsoft Web site: (

Back to the top

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top

• Windows Server 2008 for Itanium-Based Systems
• Windows Server 2008 Datacenter
• Windows Server 2008 Enterprise
• Windows Server 2008 Standard

Back to the top

kbexpertiseadvanced kbinfo kbhowto kbdriver kbwmi kbeventlog KB950257

Back to the top


Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

AddThis Social Bookmark Button

Leave a Reply

To prove that you're not a bot, enter this code
Anti-Spam Image