Event ID 27 – “The description for Event ID 27 from source e1iexpress cannot be found”

KB ID 0001130 

Problem

I was seeing intermittent network drops on my Server 2012 R2 servers, so when I took a lot in the logs this was what I found;

[box]

Log Name:      System
Source:        e1iexpress
Date:          {time}
Event ID:      27
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      {host-name}
Description:
The description for Event ID 27 from source e1iexpress cannot be found. Either the component
 that raises this event is not installed on your local computer or the installation corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the 
event.
The following information was included with the event:
Intel(R) 82574L Gigabit Network Connection.
the message resource is present but the message is not found in the string/message table.

[/box]

Solution

I found plenty of people complaining about this error with servers running Intel physical network cards, but this was a virtual machine? Not only that, but a Windows 2012 R2 Datacenter Machine running on ESXi 6. Forums indicated that it was a problem with the NIC/Driver and that replacing the card had helped. I took a look at the vNIC on the virtual server and was surprised to see it was an E1000 card. This is the default in hardware version 11 for server 2012.

Looking in Windows it’s simply listed at an Intel 82574L Gigabit Network Card.

So I added another network card (a VNXNET 3).

Disable the original card. WARNING: Make sure you are on the console and not remotely connected when you do this!

Give the new card the IP of the old one, and don’t be surprised if you see this popup, CLICK NO.

Then you can remove the original E1000 card.

Related Articles, References, Credits, or External Links

NA

7 thoughts on “Event ID 27 – “The description for Event ID 27 from source e1iexpress cannot be found”

  1. life saver!!!!!!!!
    thanks a lot man!!!
    this held me for like months and now solved right away.

    • If its virtual use the console, If its physical use an iLO/DRAC etc, if that’s not an option, then you need to physically go to the machine?

  2. I am using Windows Server 2012 R2 Standard Edition.

    Nothing Virtual,

    Can you please advise the steps for Windows Platform.

    Thank You.

Leave a Reply

Your email address will not be published. Required fields are marked *