From fbfe4344d4b8cef0ff0fad26c1a4fa46a055f834 Mon Sep 17 00:00:00 2001
From: 1orenz0 <1orenz0>
Date: Wed, 9 Oct 2019 15:41:07 +0100
Subject: [PATCH] [event_log] some events does not have a template message

---
 samples/event_log/wevtutil.py | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/samples/event_log/wevtutil.py b/samples/event_log/wevtutil.py
index ef470a7..a2848c5 100644
--- a/samples/event_log/wevtutil.py
+++ b/samples/event_log/wevtutil.py
@@ -114,11 +114,18 @@ class RealtimeEventLogger(RealtimeEventLoggerBase):
                 # Deserialize event.user_data based on the event_metadata xml template
                 message_data = event.user_data
                 message_params = self.parse_user_data(event_metadata.template, message_data)
-
                 logging.debug("message params : %s" %  message_params)
 
+
+                try:
+                    template_message = self.publisher.metadata.message(event_metadata.message_id)
+                    logging.debug("template_message : %s" %  message_params)
+                except WindowsError as e:
+                    if e.winerror != gdef.ERROR_INVALID_PARAMETER:
+                        raise
+                    return
+
                 # "sprintf" the message using the event format message as well as the deserialized elements
-                template_message = self.publisher.metadata.message(event_metadata.message_id)
                 event_message = self.format_event_log_message(template_message, message_params)
                 
                 print(event_message)