Is it a known bug in "Win32::EventLog"?
I've no idea. But if the module works on service pack 1, and not service pack 2, there are two possibilities:
- Service Pack 2 introduced a bug which only MS will be able to fix.
- Service Pack 2 changed the OS in such a way that Win32::EventLog will need modifications.
Win32 APIs usually maintain backward compatibility, and looking at the amount of buzz concerning Event log errors and SP2, it looks most likely to be a bug in the SP rather than anything that the module, perl or you can fix.
Reading some of the buzz, it looks like MS have provided hotfixes for several related problems, so that woul dbe my first avenue of research for finding a way around the problem. (Basically, I'm suggesting that you contact MS.)