NXLog Legacy Documentation

Microsoft-Windows-AppLocker

8000

task_0

-

ERROR

$Status (type: integer)

8001

task_0

-

INFO

8002

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8003

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8004

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8005

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8006

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8007

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8008

task_0

-

WARNING

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

8009

task_0

-

WARNING

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

8010

SrpPolicyConversion

win:Start

INFO

8011

SrpPolicyConversion

win:Stop

INFO

8012

SrpPolicyConversion

win:Stop

ERROR

8013

SrpPolicyRuleSort

win:Start

INFO

8014

SrpPolicyRuleSort

win:Stop

INFO

8015

SrpPolicyHitCountJoin

win:Start

INFO

8016

SrpPolicyHitCountJoin

win:Stop

INFO

8017

SrpPolicyLoad

win:Start

INFO

8018

SrpPolicyLoad

win:Stop

INFO

8019

SrpPolicyLoad

win:Stop

ERROR

8020

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8021

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8022

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8023

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8024

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8025

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8026

task_0

-

ERROR

8027

task_0

-

ERROR

8028

task_0

-

WARNING

$FilePathLength (type: integer)

$FilePath (type: string)

$Sha1Hash (type: string)

$Sha256Hash (type: string)

$Result (type: integer)

$USN (type: integer)

$Sha1CatalogHash (type: string)

$Sha256CatalogHash (type: string)

8029

task_0

-

ERROR

$FilePathLength (type: integer)

$FilePath (type: string)

$Sha1Hash (type: string)

$Sha256Hash (type: string)

$Result (type: integer)

$USN (type: integer)

$Sha1CatalogHash (type: string)

$Sha256CatalogHash (type: string)

8030

task_0

-

INFO

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8030

task_0

-

-

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8031

task_0

-

INFO

$FileNameLength (type: integer)

$FileName (type: string)

$CurrentProcessLength (type: integer)

$CurrentProcess (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$DataLength (type: integer)

$Data (type: string)

8031

task_0

-

-

$FileNameLength (type: integer)

$FileName (type: string)

$CurrentProcessLength (type: integer)

$CurrentProcess (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$DataLength (type: integer)

$Data (type: string)

8032

task_0

-

ERROR

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8033

task_0

-

WARNING

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8034

task_0

-

INFO

$ImageNameLength (type: integer)

$ImageName (type: string)

$StatusCode (type: string)

$Bucket (type: integer)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8035

task_0

-

ERROR

$ImageNameLength (type: integer)

$ImageName (type: string)

$StatusCode (type: string)

$Bucket (type: integer)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8036

task_0

-

ERROR

$IsApproved (type: boolean)

$CLSID (type: string)

8037

task_0

-

INFO

$FilePathLength (type: integer)

$FilePath (type: string)

$Sha1Hash (type: string)

$Sha256Hash (type: string)

$Result (type: integer)

$USN (type: integer)

$Sha1CatalogHash (type: string)

$Sha256CatalogHash (type: string)

8038

task_0

-

INFO

$TotalSignatureCount (type: integer)

$Signature (type: integer)

$PublisherNameLength (type: integer)

$PublisherName (type: string)

$IssuerNameLength (type: integer)

$IssuerName (type: string)

$PublisherTBSHashSize (type: integer)

$PublisherTBSHash (type: string)

$IssuerTBSHashSize (type: integer)

$IssuerTBSHash (type: string)

Microsoft-Windows-Dhcp-Client

1000

AddressConfigurationStateEvent

LostIpAddress

WARNING

$Address (type: integer)

$HWLength (type: integer)

$HWAddress (type: string)

1001

AddressConfigurationStateEvent

IpAddressNotAssigned

ERROR

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1002

AddressConfigurationStateEvent

IpLeaseDenied

ERROR

$Address1 (type: integer)

$HWLength (type: integer)

$HWAddress (type: string)

$Address2 (type: integer)

1003

AddressConfigurationStateEvent

IpLeaseRenewalFailed

WARNING

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1004

ServiceStateEvent

ErrorServiceStop

ERROR

$StatusCode (type: integer)

$DwordVal (type: integer)

1005

AddressConfigurationStateEvent

IPConflict

WARNING

$Address (type: integer)

$HWLength (type: integer)

$HWAddress (type: string)

1006

AddressConfigurationStateEvent

AutoconfigurationFailed

WARNING

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1007

AddressConfigurationStateEvent

AutoconfigurationSuccess

INFO

$HWLength (type: integer)

$HWAddress (type: string)

$Address (type: integer)

1008

AddressConfigurationStateEvent

InitNetworkInterfaceFailed

ERROR

$StatusCode (type: integer)

1018

AddressConfigurationStateEvent

Dhcpv6InitFailed

ERROR

$StatusCode (type: integer)

50001

MediaStateEvent

MediaConnect

INFO

$InterfaceId (type: integer)

50002

MediaStateEvent

MediaDisconnect

INFO

$InterfaceId (type: integer)

50003

MediaStateEvent

MediaReconnect

INFO

$InterfaceId (type: integer)

50004

AddressConfigurationStateEvent

DhcpEnabled

INFO

$InterfaceId (type: integer)

50005

AddressConfigurationStateEvent

DhcpDisabled

INFO

$InterfaceId (type: integer)

50006

ProtocolStateEvent

InitRequestAck

INFO

$InterfaceId (type: integer)

50007

ProtocolStateEvent

InitDORA

INFO

$InterfaceId (type: integer)

50008

AddressConfigurationStateEvent

StaticToDhcp

INFO

$InterfaceId (type: integer)

50009

ProtocolStateEvent

DiscoverSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50010

ProtocolStateEvent

OfferReceived

INFO

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

50011

ProtocolStateEvent

OfferDiscarded

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50012

ProtocolStateEvent

RequestSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50013

ProtocolStateEvent

AckReceived

INFO

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

50014

ProtocolStateEvent

AckDiscarded

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50015

ProtocolStateEvent

NackReceived

ERROR

$InterfaceId (type: integer)

50016

ProtocolStateEvent

UnknownMessageDiscarded

WARNING

$InterfaceId (type: integer)

50017

ProtocolStateEvent

DeclineSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50018

ProtocolStateEvent

InformSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50019

ProtocolStateEvent

ReleaseSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50020

ProtocolStateEvent

BroadcastbitToggled

INFO

$InterfaceId (type: integer)

$BoolFlag (type: boolean)

50021

ProtocolStateEvent

ErrorExtractingOptions

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50022

AddressConfigurationStateEvent

FallbackConfigSet

INFO

$InterfaceId (type: integer)

$Address (type: integer)

$StatusCode (type: integer)

50023

ProtocolStateEvent

OfferReceiveTimeout

WARNING

$InterfaceId (type: integer)

50024

ProtocolStateEvent

AckReceiveTimeout

WARNING

$InterfaceId (type: integer)

50025

ProtocolStateEvent

CancelRenewal

INFO

$InterfaceId (type: integer)

50028

AddressConfigurationStateEvent

AddressPlumbed

INFO

$Address (type: integer)

$InterfaceId (type: integer)

$StatusCode (type: integer)

50029

AddressConfigurationStateEvent

AddressUnplumbed

INFO

$Address (type: integer)

$InterfaceId (type: integer)

$StatusCode (type: integer)

50030

AddressConfigurationStateEvent

PlumbingError

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50032

AddressConfigurationStateEvent

LeaseExpired

INFO

$InterfaceId (type: integer)

$Address (type: integer)

50033

MediaStateEvent

InterfaceAdded

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50034

AddressConfigurationStateEvent

ErrorInitializeInterface

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50035

AddressConfigurationStateEvent

RouteUpdated

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50036

ServiceStateEvent

ServiceStart

INFO

50037

ServiceStateEvent

ServiceStop

INFO

$DwordVal (type: integer)

50038

ServiceStateEvent

ErrorInitService

ERROR

$StatusCode (type: integer)

50039

WinsockStateEvent

ErrorOpeningSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50040

WinsockStateEvent

ErrorClosingSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50041

DNSStateEvent

DomainChangeNotification

INFO

50042

DNSStateEvent

DnsRegistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword (type: integer)

50043

DNSStateEvent

DnsDeregistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50044

ProtocolStateEvent

InformAckReceived

INFO

$InterfaceId (type: integer)

50053

ProtocolStateEvent

NetworkError

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50055

AddressConfigurationStateEvent

GatewayReachable

INFO

$Address (type: integer)

$InterfaceId (type: integer)

50056

AddressConfigurationStateEvent

GatewayUnreachable

ERROR

$InterfaceId (type: integer)

50058

AddressConfigurationStateEvent

SuccessfulLease

INFO

50059

AddressConfigurationStateEvent

RouteAdded

INFO

$Str1 (type: string)

$Str2 (type: string)

$Str3 (type: string)

$Str4 (type: string)

50060

AddressConfigurationStateEvent

RouteDeleted

INFO

$Str1 (type: string)

$Str2 (type: string)

$Str3 (type: string)

$Str4 (type: string)

50061

ProtocolStateEvent

OfferReceivedForDiagnostics

INFO

$InterfaceId (type: integer)

50062

AddressConfigurationStateEvent

StartGatewayReachabilityTest

INFO

$Address (type: integer)

$InterfaceId (type: integer)

50063

AddressConfigurationStateEvent

NLANotified

INFO

$InterfaceId (type: integer)

50064

AddressConfigurationStateEvent

CacheScavengerRun

INFO

$InterfaceId (type: integer)

50065

AddressConfigurationStateEvent

NetworkHintMatchFound

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50066

AddressConfigurationStateEvent

MatchedAddressPlumbed

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50067

AddressConfigurationStateEvent

NetworkHintReceived

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50068

AddressConfigurationStateEvent

AddressAlreadyExists

ERROR

$Address (type: integer)

$InterfaceId (type: integer)

50069

ProtocolStateEvent

BroadcastbitCached

INFO

$BoolFlag (type: boolean)

$InterfaceId (type: integer)

50070

AddressConfigurationStateEvent

NetworkHintNotReceived

INFO

$InterfaceId (type: integer)

50071

AddressConfigurationStateEvent

NetworkHintMatchNotFound

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$InterfaceId (type: integer)

50072

ProtocolStateEvent

DiagnosticsInitiated

INFO

$InterfaceId (type: integer)

50073

ProtocolStateEvent

DiagnosticsFailed

INFO

$InterfaceId (type: integer)

50074

ProtocolStateEvent

FirewallPortExempted

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50075

ProtocolStateEvent

FirewallPortClosed

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50076

AddressConfigurationStateEvent

MatchedAddressNotPlumbed

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50077

ProtocolStateEvent

AggressiveRetryOn

INFO

$InterfaceId (type: integer)

50081

ProtocolStateEvent

AbandonDiscovInCSSinceDhcp

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

50083

MediaStateEvent

AcquireNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50084

MediaStateEvent

ReleaseNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50085

ProtocolStateEvent

RegisterConflictDetectionNotification

INFO

$InterfaceId (type: integer)

$Address (type: integer)

50086

ProtocolStateEvent

ConflictDetectionComplete

INFO

$InterfaceId (type: integer)

$Address (type: integer)

$StatusCode (type: integer)

50087

ProtocolStateEvent

ConflictDetectionTentative

INFO

$InterfaceId (type: integer)

$Address (type: integer)

50088

NetworkParameterStateEvent

ParamChangeRegister

INFO

$ProcID (type: integer)

$UniqueID (type: integer)

$EventPath (type: string)

$ClassIDSize (type: integer)

$ClassID (type: string)

$OptListSize (type: integer)

$OptList (type: string)

$IsVendor (type: boolean)

50089

NetworkParameterStateEvent

ParamChangeUnregister

INFO

$ProcID (type: integer)

$UniqueID (type: integer)

50090

NetworkParameterStateEvent

ParamChangeNotification

INFO

$ProcID (type: integer)

$UniqueID (type: integer)

$StatusCode (type: integer)

50091

NetworkParameterStateEvent

ParamRequest

INFO

$InterfaceLUID (type: string)

$ClassIDSize (type: integer)

$ClassID (type: string)

$StandardOptListSize (type: integer)

$StandardOptList (type: string)

$VendorOptListSize (type: integer)

$VendorOptList (type: string)

50092

NetworkParameterStateEvent

ParamRequestUnblocked

INFO

$InterfaceLUID (type: string)

$InterfaceId (type: integer)

50093

NetworkParameterStateEvent

ParamRequestComplete

INFO

$InterfaceLUID (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

$OptDataSize (type: integer)

$OptData (type: string)

50094

ProtocolStateEvent

FirewallPortExemptionTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50095

ProtocolStateEvent

FirewallPortCloseTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50096

ProtocolStateEvent

AbandonDiscovInCSSinceStateless

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

50097

ProtocolStateEvent

AbandonDiscovInCSSinceStatic

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

50098

ProtocolStateEvent

DontStartDiscovInCSSinceV6Plumbed

INFO

$InterfaceId (type: integer)

$Address (type: string)

50099

ProtocolStateEvent

StartDiscovInCSSinceV6Unplumbed

INFO

$InterfaceId (type: integer)

50100

ProtocolStateEvent

StartDiscovInCSAtCompulsoryTime

INFO

$InterfaceId (type: integer)

50101

NetworkParameterStateEvent

NotifyCSEntry

INFO

50102

NetworkParameterStateEvent

NotifyCSExit

INFO

50103

ServiceStateEvent

ServiceShutdown

INFO

50104

ServiceStateEvent

ServiceShutdown

INFO

50105

ServiceStateEvent

ServiceShutdown

INFO

50106

ServiceStateEvent

ServiceShutdown

INFO

60000

ProtocolStateEvent

PerfTrackAckConfirm

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60001

ProtocolStateEvent

PerfTrackAckDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60002

AddressConfigurationStateEvent

PerfTrackGatewayReachable

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60003

AddressConfigurationStateEvent

PerfTrackStatic

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60004

AddressConfigurationStateEvent

PerfTrackFallbackAddressSet

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

60005

ProtocolStateEvent

PerfTrackToggleRequestAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60006

ProtocolStateEvent

PerfTrackToggleDORAAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60007

ProtocolStateEvent

PerfTrackToggleInitDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60010

ProtocolStateEvent

PerfTrackAckConfirm

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60011

ProtocolStateEvent

PerfTrackAckDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60012

AddressConfigurationStateEvent

PerfTrackGatewayReachable

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60013

AddressConfigurationStateEvent

PerfTrackStatic

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60014

AddressConfigurationStateEvent

PerfTrackFallbackAddressSet

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

60015

ProtocolStateEvent

PerfTrackToggleRequestAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60016

ProtocolStateEvent

PerfTrackToggleDORAAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60017

ProtocolStateEvent

PerfTrackToggleInitDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60018

MediaStateEvent

PerfTrackMediaConnect

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60019

MediaStateEvent

PerfTrackMediaConnectEnd

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60020

MediaStateEvent

PerfTrackMediaReconnect

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60021

ProtocolStateEvent

PerfTrackDiscoverNetworkLatency

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60022

ProtocolStateEvent

PerfTrackDiscoverTimeout

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60023

ProtocolStateEvent

PerfTrackRequestNetworkLatency

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60024

ProtocolStateEvent

PerfTrackRequestNoResponse

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60025

AddressConfigurationStateEvent

PerfTrackFallbackAfterDiscover

INFO

$InterfaceGuid (type: string)

$Address (type: integer)

$InterfaceId (type: integer)

60026

AddressConfigurationStateEvent

ProcessDHCPRequestForeverEntered

INFO

60027

AddressConfigurationStateEvent

ProcessDHCPRequestForeverTimedout

INFO

60028

AddressConfigurationStateEvent

CreateRenewalSignalHandleFailed

ERROR

$StatusCode (type: integer)

60029

AddressConfigurationStateEvent

DeleteRenewTimerFailed

ERROR

$StatusCode (type: integer)

60030

AddressConfigurationStateEvent

ResetRenewalSignalHandleFailed

ERROR

$StatusCode (type: integer)

60031

AddressConfigurationStateEvent

CreateRenewTimerFailed

ERROR

$StatusCode (type: integer)

60032

AddressConfigurationStateEvent

ProcessDHCPRequestForeverFailed

ERROR

$StatusCode (type: integer)

Microsoft-Windows-DHCPv6-Client

1000

AddressConfigurationStateEvent

LostIpAddress

ERROR

$InterfaceGUID (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1003

AddressConfigurationStateEvent

LeaseRenewalFailed

ERROR

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1004

ServiceStateEvent

ErrorServiceStop

ERROR

$StatusCode (type: integer)

$DwordVal (type: integer)

1005

AddressConfigurationStateEvent

IPConflict

WARNING

$InterfaceGUID (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1006

MediaStateEvent

RAChanged

INFO

$InterfaceId (type: integer)

$Flag1 (type: boolean)

$Flag2 (type: boolean)

1008

AddressConfigurationStateEvent

InitNetworkInterfaceFailed

ERROR

$StatusCode (type: integer)

1009

ServiceStateEvent

DHCPv6DUIDValidationFailed

INFO

$HWLength (type: integer)

$HWAddress (type: string)

$DUIDLength (type: integer)

$DUID (type: string)

$NewHWLength (type: integer)

$NewHWAddress (type: string)

$NewDUIDLength (type: integer)

$NewDUID (type: string)

1010

AddressConfigurationStateEvent

DHCPv6NetworkHintMatch

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1011

AddressConfigurationStateEvent

DHCPv6NetworkHintStatefullConfig

INFO

$Address1 (type: string)

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1012

AddressConfigurationStateEvent

DHCPv6NetworkHintStatelessConfig

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1013

AddressConfigurationStateEvent

DHCPv6NetworkHintConfigExpired

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50057

ProtocolStateEvent

NetworkError

ERROR

$StatusCode (type: integer)

50071

MediaStateEvent

AcquireNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50072

MediaStateEvent

ReleaseNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51001

MediaStateEvent

MediaConnect

INFO

$InterfaceId (type: integer)

51002

MediaStateEvent

MediaDisconnect

INFO

$InterfaceId (type: integer)

51004

ProtocolStateEvent

InitConfirmReply

INFO

$InterfaceId (type: integer)

51005

ProtocolStateEvent

InitSARR

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51006

ProtocolStateEvent

SolicitSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51007

ProtocolStateEvent

AdvertiseReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Address (type: string)

51008

ProtocolStateEvent

AdvertiseDiscarded

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51009

ProtocolStateEvent

RequestSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51010

ProtocolStateEvent

ReplyForRequestReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Address (type: string)

51011

ProtocolStateEvent

InvalidReplyForRequestReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51012

ProtocolStateEvent

RenewSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51013

ProtocolStateEvent

ReplyForRenewReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51014

ProtocolStateEvent

InvalidReplyForRenewReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51015

ProtocolStateEvent

RebindSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51016

ProtocolStateEvent

ReplyForRebindReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51017

ProtocolStateEvent

InvalidReplyForRebindReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51018

ProtocolStateEvent

ReleaseSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51019

ProtocolStateEvent

DeclineSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51020

ProtocolStateEvent

ReplyForDeclineReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51021

ProtocolStateEvent

InvalidReplyForDeclineReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51022

ProtocolStateEvent

ConfirmSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51023

ProtocolStateEvent

ReplyForConfirmReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51024

ProtocolStateEvent

InvalidReplyForConfirmReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51025

ProtocolStateEvent

InfoRequestSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51026

ProtocolStateEvent

ReplyForInfoRequestReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51027

ProtocolStateEvent

InvalidReplyForInfoRequestReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51029

ProtocolStateEvent

ErrorCreatingPacket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51030

ProtocolStateEvent

ErrorExtractingOptions

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51031

AddressConfigurationStateEvent

StatefulToStateless

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword1 (type: integer)

$Dword2 (type: integer)

51032

AddressConfigurationStateEvent

StatelessToStateful

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51033

AddressConfigurationStateEvent

NonDhcpToStateful

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51034

AddressConfigurationStateEvent

NonDhcpToStateless

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword1 (type: integer)

$Dword2 (type: integer)

51035

AddressConfigurationStateEvent

StaticMode

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51036

ProtocolStateEvent

ErrorInParsing

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51037

ProtocolStateEvent

InformationRefreshTimeOptionReceived

INFO

$InterfaceId (type: integer)

$RefreshTime (type: integer)

51038

ProtocolStateEvent

InformationRefreshTimeExpired

INFO

$InterfaceId (type: integer)

51039

AddressConfigurationStateEvent

AddressPlumbed

INFO

$Address (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

51040

AddressConfigurationStateEvent

AddressUnplumbed

INFO

$Address (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

51043

MediaStateEvent

InterfaceAdded

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51044

AddressConfigurationStateEvent

ErrorInitializingInterface

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51045

AddressConfigurationStateEvent

ErrorPlumbingParameters

ERROR

$StatusCode (type: integer)

51046

ServiceStateEvent

ServiceStart

INFO

51047

ServiceStateEvent

ServiceStop

INFO

$DwordVal (type: integer)

51048

WinsockStateEvent

ErrorOpeningSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51049

WinsockStateEvent

ErrorClosingSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51050

DNSStateEvent

DnsRegistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword (type: integer)

51051

DNSStateEvent

dnsDeregistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51057

ServiceStateEvent

ServiceStopWithRefCount

INFO

$DwordVal (type: integer)

51058

AddressConfigurationStateEvent

StatefulToStateful

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51059

ProtocolStateEvent

InvalidMessageDiscarded

ERROR

51060

AddressConfigurationStateEvent

SetClassID

INFO

$InterfaceGUID (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

51061

AddressConfigurationStateEvent

AddressAlreadyExists

ERROR

$Address (type: string)

$InterfaceId (type: integer)

51062

AddressConfigurationStateEvent

FailedToObtainLease

ERROR

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

51063

ProtocolStateEvent

FirewallPortExempted

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51064

ProtocolStateEvent

FirewallPortClosed

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51065

AddressConfigurationStateEvent

ModeChanging

INFO

$InterfaceId (type: integer)

$NewMode (type: integer)

51066

ProtocolStateEvent

AggressiveRetryOn

INFO

$InterfaceId (type: integer)

51067

ProtocolStateEvent

AbandonSolicitInCSSinceDhcp

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address1 (type: integer)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51068

ProtocolStateEvent

AbandonSolicitInCSSinceStatic

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address1 (type: integer)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51069

ProtocolStateEvent

DontStartSolicitInCSSinceV4Plumbed

INFO

$InterfaceId (type: integer)

$Address1 (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51070

ProtocolStateEvent

StartSolicitInCSSinceV4Unplumbed

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51073

ProtocolStateEvent

FirewallPortExemptionTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51074

ProtocolStateEvent

FirewallPortCloseTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51075

NetworkParameterStateEvent

NotifyCSEntry

INFO

51076

NetworkParameterStateEvent

NotifyCSExit

INFO

51077

ProtocolStateEvent

StartSolicitInCSAtCompulsoryTime

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51078

ProtocolStateEvent

EnableDhcpV6

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51079

ProtocolStateEvent

DisableDhcpV6

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51080

ProtocolStateEvent

NoProcessingSinceDhcpV6Disabled

INFO

$InterfaceId (type: integer)

51081

ProtocolStateEvent

AbandonSolicitInCSSinceV6Static

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51082

ProtocolStateEvent

AbandonSolicitInCSSinceV6Stateless

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51083

ProtocolStateEvent

AbandonSolicitSinceNonMulticast

INFO

$InterfaceId (type: integer)

51084

ProtocolStateEvent

NoteFlagValues

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

60000

ProtocolStateEvent

PerfTrackSARR

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: string)

60001

ProtocolStateEvent

PerfTrackInfoRequest

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60002

MediaStateEvent

PerfTrackMediaConnect

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60003

MediaStateEvent

PerfTrackMediaConnectEnd

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

Microsoft-Windows-Directory-Services-SAM-Utility

1

task_0

Opcode_SamDatabaseChangeEvent

INFO

Microsoft-Windows-Directory-Services-SAM

12288

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

12289

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

12291

task_0

-

ERROR

$__binLength (type: integer)

$LogStatus (type: string)

12293

task_0

-

ERROR

$AccountDistinguishedName (type: string)

12294

task_0

-

ERROR

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

12295

task_0

-

INFO

$FilePath (type: string)

$__binLength (type: integer)

$WinError (type: string)

12296

task_0

-

INFO

$DirectoryPath (type: string)

$__binLength (type: integer)

$WinError (type: string)

12297

task_0

-

INFO

$ComputerName (type: string)

12298

task_0

-

ERROR

$ComputerName (type: string)

12299

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

12300

task_0

-

INFO

12301

task_0

-

INFO

12302

task_0

-

ERROR

$SecurityPackage (type: string)

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

12303

task_0

-

ERROR

$AccountDistinguishedName (type: string)

12304

task_0

-

INFO

$AccountDistinguishedName (type: string)

$SystemAssignedAccountName (type: string)

12305

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16384

task_0

-

INFO

$AccountName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16385

task_0

-

WARNING

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16386

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16387

task_0

-

WARNING

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16388

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16389

task_0

-

WARNING

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16390

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16391

task_0

-

WARNING

$AccountDistinguishedName (type: string)

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16392

task_0

-

WARNING

$AccountSID (type: string)

$AccountDistinguishedName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16393

task_0

-

WARNING

$AccountDistinguishedName (type: string)

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16394

task_0

-

WARNING

$AccountRID (type: integer)

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16395

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16398

task_0

-

ERROR

$SecurityPackage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16399

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16400

task_0

-

INFO

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16401

task_0

-

INFO

$AccountName (type: string)

$GroupName (type: string)

$ErrorMessage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16402

task_0

-

INFO

$AccountName (type: string)

$GroupName (type: string)

$ErrorMessage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16403

task_0

-

INFO

$AccountName (type: string)

$ErrorMessage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16405

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16406

task_0

-

WARNING

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16407

task_0

-

WARNING

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16408

task_0

-

INFO

16409

task_0

-

ERROR

$AccountName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16410

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16411

task_0

-

ERROR

$AccountName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16412

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16413

task_0

-

INFO

$AccountName (type: string)

$GroupName (type: string)

$ErrorString (type: string)

$__binLength (type: integer)

$BinaryData (type: string)

16642

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16643

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16644

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16645

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16646

task_0

-

ERROR

$ComputedRIDValue (type: integer)

$__binLength (type: integer)

$ErrorCode (type: string)

16647

task_0

-

INFO

16648

task_0

-

INFO

$__binLength (type: integer)

$ErrorCode (type: string)

16649

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16651

task_0

-

ERROR

$ErrorMessage (type: string)

16652

task_0

-

INFO

16653

task_0

-

WARNING

$Maximum (type: integer)

16654

task_0

-

INFO

16655

task_0

-

INFO

$NewValue (type: integer)

16656

task_0

-

WARNING

$CeilingTriggerRid (type: integer)

16657

task_0

-

ERROR

$CeilingTriggerRid (type: integer)

16658

task_0

-

WARNING

$RemainingRids (type: integer)

16935

task_0

-

ERROR

$ComputerName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16936

task_0

-

ERROR

$ComputerName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16937

task_0

-

INFO

$ComputerName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16944

task_0

-

INFO

$OID (type: string)

$ErrorCode (type: integer)

16945

task_0

-

INFO

$OID (type: string)

$OIDObjectDN (type: string)

$ErrorCode (type: integer)

16946

task_0

-

INFO

$OID (type: string)

16947

task_0

-

ERROR

$OID (type: string)

$OIDObjectDN (type: string)

$GroupDN (type: string)

$GroupGUID (type: string)

$GroupSID (type: string)

$ErrorCode (type: integer)

16948

task_0

-

ERROR

$GroupDN (type: string)

$GroupGUID (type: string)

$GroupSID (type: string)

$Operation (type: string)

$ErrorCode (type: integer)

16949

task_0

-

ERROR

$OIDName (type: string)

$GroupName (type: string)

$GroupGUID (type: string)

$GroupSID (type: string)

$ErrorCode (type: integer)

16950

task_0

-

WARNING

$User (type: string)

$DroppedClaims (type: string)

16951

task_0

-

WARNING

$User (type: string)

$Errorcode (type: integer)

16952

task_0

-

ERROR

$User (type: string)

$Errorcode (type: integer)

16953

task_0

-

ERROR

$NotificationPackage (type: string)

$Registrykey (type: string)

$Registryvalue (type: string)

$Errorcode (type: integer)

16960

task_0

-

INFO

16961

task_0

-

WARNING

16962

task_0

-

INFO

$DefaultSDString (type: string)

16963

task_0

-

INFO

$RegistrySDString (type: string)

16964

task_0

-

WARNING

$MalformedSDString (type: string)

$DefaultSDString (type: string)

16965

task_0

-

WARNING

$ClientSID (type: string)

$ClientNetworkAddress (type: string)

16966

task_0

-

INFO

16967

task_0

-

INFO

16968

task_0

-

WARNING

$ClientSID (type: string)

$ClientNetworkAddress (type: string)

16969

task_0

-

WARNING

$Throttlewindow (type: integer)

$SuppressedMessageCount (type: integer)

16976

task_0

-

ERROR

$Status (type: string)

16977

task_0

-

INFO

$MinimumPasswordLength (type: integer)

$MinimumPasswordLengthAudit (type: integer)

16978

task_0

-

INFO

$AccountName (type: string)

$MinimumPasswordLength (type: integer)

$MinimumPasswordLengthAudit (type: integer)

16979

task_0

-

ERROR

$MinimumPasswordLength (type: integer)

16982

task_0

-

INFO

16983

task_0

-

INFO

16984

task_0

-

INFO

$NumberofRPCmethods (type: integer)

$ThrottleWindow (type: integer)

16985

task_0

-

INFO

$RPCMethod (type: string)

$UserAccountName (type: string)

$ClientSID (type: string)

$ClientNetworkAddress (type: string)

16986

task_0

-

WARNING

$AccountRidHex (type: string)

$AccountRid (type: integer)

$SavedAccountName (type: string)

$DeletedAccountNames (type: string)

16987

task_0

-

WARNING

$AccountRidHex (type: string)

$AccountRid (type: integer)

$DuplicatedAccountNames (type: string)

$RetainedAccountName (type: string)

16990

task_0

-

ERROR

$Accountname (type: string)

$AccountobjectClass (type: string)

$userAccountcontrol (type: integer)

$Calleraddress (type: string)

$CallerSID (type: string)

16991

task_0

-

ERROR

$SamAccountName (type: string)

Microsoft-Windows-DNS-Client

1000

DnsNoServerConfigV4

-

INFO

$Location (type: integer)

$Context (type: integer)

1001

DnsServerForInterface

-

INFO

$Interface (type: string)

$TotalServerCount (type: integer)

$Index (type: integer)

$DynamicAddress (type: integer)

$AddressLength (type: integer)

$Address (type: string)

1002

DnsServerQueryChange

-

INFO

$Interface (type: string)

$AddressLength (type: integer)

$Address (type: string)

1003

DnsServerValidationSuccess

-

INFO

$AddressLength (type: integer)

$Address (type: string)

1005

DnsServerValidationFailure

-

ERROR

$AddressLength (type: integer)

$Address (type: string)

1007

DnsMissingPrimarySuffix

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1008

DnsMissingPrimarySuffixSystem

-

WARNING

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1009

DnsNonMatchingSuffix

-

ERROR

$DnsSuffix (type: string)

$AdSuffix (type: string)

1010

DnsNonMatchingSuffixSystem

-

WARNING

$DnsSuffix (type: string)

$AdSuffix (type: string)

1011

DnsHostFileError

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1012

DnsHostFileErrorSystem

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1013

DnsAllServersTimeout

-

ERROR

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1014

DnsAllServersTimeoutSystem

-

WARNING

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1015

DnsServerTimeout

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1016

DnsNameError

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1017

DnsAuthoritativeResponse

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1018

DnsLinkLocal

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

$DnsAddressLength (type: integer)

$DnsAddress (type: string)

1019

DnsNoServerConfigV6

-

INFO

$Location (type: integer)

$Context (type: integer)

1020

DnsReadPolicyTable

-

INFO

$KeyName (type: string)

$DnsSecValidationRequired (type: integer)

$DnsQueryOverIPSec (type: integer)

$DnsEncryption (type: integer)

$DirectAccessServerList (type: string)

$RemoteIPSEC (type: integer)

$RemoteEncryption (type: integer)

$ProxyType (type: integer)

$ProxyName (type: string)

1021

DnsMatchPolicyInfo

-

INFO

$QueryName (type: string)

$KeyName (type: string)

$DnsSecValidationRequired (type: integer)

$DnsQueryOverIPSec (type: integer)

$DnsEncryption (type: integer)

$DirectAccessServerList (type: string)

$ProxyType (type: integer)

$ProxyName (type: string)

1022

DnsSecureNoFallback

-

INFO

$QueryName (type: string)

1023

DnsPolicySystemReadError

-

ERROR

$RuleName (type: string)

$ErrorCode (type: integer)

1024

DnsQueryBadXid

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1025

DnsQueryInvalidServerIp

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1026

DnsQueryInvalidQuestion

-

INFO

$QueryName (type: string)

$ResponseQuestion (type: string)

$AddressLength (type: integer)

$Address (type: string)

1027

task_0

-

INFO

$QueryName (type: string)

1028

DnsMatchPolicyInfo

-

INFO

$QueryName (type: string)

$KeyName (type: string)

$DnsSecValidationRequired (type: integer)

$DnsQueryOverIPSec (type: integer)

$DnsEncryption (type: integer)

$DirectAccessServerList (type: string)

$ProxyType (type: integer)

$ProxyName (type: string)

$GenericServerList (type: string)

$IdnConfig (type: integer)

3000

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

3001

task_0

-

INFO

$Status (type: integer)

3002

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

3003

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$Status (type: integer)

3004

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

3005

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$Status (type: integer)

3006

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

$ServerList (type: string)

$IsNetworkQuery (type: integer)

$NetworkQueryIndex (type: integer)

$InterfaceIndex (type: integer)

$IsAsyncQuery (type: integer)

3007

task_0

-

INFO

$QueryName (type: string)

3008

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

$QueryStatus (type: integer)

$QueryResults (type: string)

3009

task_0

-

INFO

$QueryName (type: string)

$IsParallelNetworkQuery (type: integer)

$NetworkIndex (type: integer)

$InterfaceCount (type: integer)

$AdapterName (type: string)

$LocalAddress (type: string)

$DNSServerAddress (type: string)

3010

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$DnsServerIpAddress (type: string)

3011

task_0

-