Actually I want the events description not in XML but in text format. I was
able to translate all the logs, say, Security, System and application;
including the event description part in text format in VISTA Beta2. But the
moment I installed the publicly released Windows VISTA Business, downloaded
from MSDN subscriber downloads, I am getting all event properties like event
id, source name, username, system name etc., but fails to get the event
description which I used to get when using EvtFormatMessage function in old
Vista Beta2. I am getting the error code 1815, which says, The specified
resource language ID cannot be found in the image file.

The code, which I used to get event description, is given below:

In VISTA Beta2:

EvtFormatMessage(hpublisherConfig, hEvent, NULL, dwPropertyCount, valArray,
EvtFormatMessageEvent, dwBuffSize, wcBuf, &dwBuffUsed);

In VISTA Release:

As the same code which I was using in VISTA Beta was not working, I thought
of replacing the third para of EvtFormatMessage, which is, DWORD MessageId,
with publisher's message resource, instead of NULL as given above. But still
its not working for me. Can you please shed some light into this problem.

The new code, which I discussed, is given below:

EvtGetPublisherMetadataProperty(
hpublisherConfig, EvtPublisherMetadataPublisherMessageID,
0, bufferSize, metadataProperty, &bufferSize);

EvtFormatMessage(hpublisherConfig, hEvent, (*metadataProperty).UInt32Val,
dwPropertyCount, valArray, EvtFormatMessageEvent, dwBuffSize, wcBuf,
&dwBuffUsed);