ERROR_EVT_QUERY_RESULT_STALE - 15011 (0x3AA3)
The query result is stale / invalid. This may be due to the log being cleared or rolling over after the query result was created. Users should handle this code by releasing the query result object and reissuing the query.
Updated: Feb 21, 2026
Technical Meaning
The error code ERROR_EVT_QUERY_RESULT_STALE (15011, 0x3AA3) indicates that the query result obtained from an event log is no longer valid due to changes in the log content. This typically occurs when the log has been cleared or rolled over after the initial query was executed.
Error Details
This error code suggests that the data retrieved through a previous query operation may be outdated or invalid because of recent modifications to the event log. The log's contents might have changed, leading to discrepancies between the original query result and the current state of the log.
Usage Context
Developers should handle this error by releasing any resources associated with the stale query result and reissuing the query to obtain updated data from the event log. This ensures that applications remain up-to-date with the most recent events recorded in the system.
Developer Interpretation
When encountering ERROR_EVT_QUERY_RESULT_STALE, developers should take into account the possibility of log modifications, such as clearing or rolling over, which invalidate previously obtained query results. The appropriate response is to release any resources related to the stale result and re-execute the query with updated parameters if necessary.
Related Errors
ERROR_EVT_LOG_DISABLED(15002): Indicates that the event log service is disabled.ERROR_EVT_NO_CURRENT_DATABASE(15003): Suggests that there is no current database available for querying events.
FAQ
Q: What does ERROR_EVT_QUERY_RESULT_STALE mean?
A: This error indicates that a previously obtained query result from an event log has become invalid due to changes in the log content, such as clearing or rolling over. Developers should release the stale result and reissue the query.
Q: How can I handle this error in my application?
A: Release any resources associated with the stale query result and re-execute the query to ensure that you have the most current data from the event log.
Summary
ERROR_EVT_QUERY_RESULT_STALE (15011) is a specific error code indicating that a previously obtained query result from an event log has become invalid due to changes in the log content. Developers should handle this by releasing stale resources and reissuing queries as necessary.