NXLog Docs

Fields by providers

This table lists the most common providers and their associated fields.

Provider Event value Task Operation Level Fields

Microsoft-Windows-AppLocker

8000

task_0

-

ERROR

$Status (type: integer)

8001

task_0

-

INFO

8002

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8003

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8004

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8005

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8006

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8007

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

$FileHashLength (type: integer)

$FileHash (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

$TargetLogonId (type: string)

$FullFilePathLength (type: integer)

$FullFilePathBuffer (type: string)

8008

task_0

-

WARNING

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

8009

task_0

-

WARNING

$FilePathLength (type: integer)

$FilePathBuffer (type: string)

8010

SrpPolicyConversion

win:Start

INFO

8011

SrpPolicyConversion

win:Stop

INFO

8012

SrpPolicyConversion

win:Stop

ERROR

8013

SrpPolicyRuleSort

win:Start

INFO

8014

SrpPolicyRuleSort

win:Stop

INFO

8015

SrpPolicyHitCountJoin

win:Start

INFO

8016

SrpPolicyHitCountJoin

win:Stop

INFO

8017

SrpPolicyLoad

win:Start

INFO

8018

SrpPolicyLoad

win:Stop

INFO

8019

SrpPolicyLoad

win:Stop

ERROR

8020

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8021

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8022

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8023

task_0

-

INFO

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8024

task_0

-

WARNING

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8025

task_0

-

ERROR

$PolicyNameLength (type: integer)

$PolicyNameBuffer (type: string)

$RuleId (type: string)

$RuleNameLength (type: integer)

$RuleNameBuffer (type: string)

$RuleSddlLength (type: integer)

$RuleSddlBuffer (type: string)

$TargetUser (type: string)

$TargetProcessId (type: integer)

$PackageLength (type: integer)

$PackageBuffer (type: string)

$FqbnLength (type: integer)

$Fqbn (type: string)

8026

task_0

-

ERROR

8027

task_0

-

ERROR

8028

task_0

-

WARNING

$FilePathLength (type: integer)

$FilePath (type: string)

$Sha1Hash (type: string)

$Sha256Hash (type: string)

$Result (type: integer)

$USN (type: integer)

$Sha1CatalogHash (type: string)

$Sha256CatalogHash (type: string)

8029

task_0

-

ERROR

$FilePathLength (type: integer)

$FilePath (type: string)

$Sha1Hash (type: string)

$Sha256Hash (type: string)

$Result (type: integer)

$USN (type: integer)

$Sha1CatalogHash (type: string)

$Sha256CatalogHash (type: string)

8030

task_0

-

INFO

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8030

task_0

-

-

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8031

task_0

-

INFO

$FileNameLength (type: integer)

$FileName (type: string)

$CurrentProcessLength (type: integer)

$CurrentProcess (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$DataLength (type: integer)

$Data (type: string)

8031

task_0

-

-

$FileNameLength (type: integer)

$FileName (type: string)

$CurrentProcessLength (type: integer)

$CurrentProcess (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$DataLength (type: integer)

$Data (type: string)

8032

task_0

-

ERROR

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8033

task_0

-

WARNING

$ImageNameLength (type: integer)

$ImageName (type: string)

$ParentProcessLength (type: integer)

$ParentProcess (type: string)

$StatusCode (type: string)

$AppLockerReason (type: integer)

$Bucket (type: integer)

$USN (type: integer)

$NtfsFileIdSize (type: integer)

$NtfsFileId (type: string)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8034

task_0

-

INFO

$ImageNameLength (type: integer)

$ImageName (type: string)

$StatusCode (type: string)

$Bucket (type: integer)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8035

task_0

-

ERROR

$ImageNameLength (type: integer)

$ImageName (type: string)

$StatusCode (type: string)

$Bucket (type: integer)

$OriginDataPresent (type: boolean)

$SessionId (type: string)

$SubSessionId (type: string)

$Origin (type: integer)

$Type (type: integer)

$Generation (type: integer)

$SmartScreen (type: integer)

$RevocationID (type: integer)

$DataLength (type: integer)

$Data (type: string)

8036

task_0

-

ERROR

$IsApproved (type: boolean)

$CLSID (type: string)

8037

task_0

-

INFO

$FilePathLength (type: integer)

$FilePath (type: string)

$Sha1Hash (type: string)

$Sha256Hash (type: string)

$Result (type: integer)

$USN (type: integer)

$Sha1CatalogHash (type: string)

$Sha256CatalogHash (type: string)

8038

task_0

-

INFO

$TotalSignatureCount (type: integer)

$Signature (type: integer)

$PublisherNameLength (type: integer)

$PublisherName (type: string)

$IssuerNameLength (type: integer)

$IssuerName (type: string)

$PublisherTBSHashSize (type: integer)

$PublisherTBSHash (type: string)

$IssuerTBSHashSize (type: integer)

$IssuerTBSHash (type: string)

Microsoft-Windows-Dhcp-Client

1000

AddressConfigurationStateEvent

LostIpAddress

WARNING

$Address (type: integer)

$HWLength (type: integer)

$HWAddress (type: string)

1001

AddressConfigurationStateEvent

IpAddressNotAssigned

ERROR

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1002

AddressConfigurationStateEvent

IpLeaseDenied

ERROR

$Address1 (type: integer)

$HWLength (type: integer)

$HWAddress (type: string)

$Address2 (type: integer)

1003

AddressConfigurationStateEvent

IpLeaseRenewalFailed

WARNING

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1004

ServiceStateEvent

ErrorServiceStop

ERROR

$StatusCode (type: integer)

$DwordVal (type: integer)

1005

AddressConfigurationStateEvent

IPConflict

WARNING

$Address (type: integer)

$HWLength (type: integer)

$HWAddress (type: string)

1006

AddressConfigurationStateEvent

AutoconfigurationFailed

WARNING

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1007

AddressConfigurationStateEvent

AutoconfigurationSuccess

INFO

$HWLength (type: integer)

$HWAddress (type: string)

$Address (type: integer)

1008

AddressConfigurationStateEvent

InitNetworkInterfaceFailed

ERROR

$StatusCode (type: integer)

1018

AddressConfigurationStateEvent

Dhcpv6InitFailed

ERROR

$StatusCode (type: integer)

50001

MediaStateEvent

MediaConnect

INFO

$InterfaceId (type: integer)

50002

MediaStateEvent

MediaDisconnect

INFO

$InterfaceId (type: integer)

50003

MediaStateEvent

MediaReconnect

INFO

$InterfaceId (type: integer)

50004

AddressConfigurationStateEvent

DhcpEnabled

INFO

$InterfaceId (type: integer)

50005

AddressConfigurationStateEvent

DhcpDisabled

INFO

$InterfaceId (type: integer)

50006

ProtocolStateEvent

InitRequestAck

INFO

$InterfaceId (type: integer)

50007

ProtocolStateEvent

InitDORA

INFO

$InterfaceId (type: integer)

50008

AddressConfigurationStateEvent

StaticToDhcp

INFO

$InterfaceId (type: integer)

50009

ProtocolStateEvent

DiscoverSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50010

ProtocolStateEvent

OfferReceived

INFO

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

50011

ProtocolStateEvent

OfferDiscarded

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50012

ProtocolStateEvent

RequestSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50013

ProtocolStateEvent

AckReceived

INFO

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

50014

ProtocolStateEvent

AckDiscarded

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50015

ProtocolStateEvent

NackReceived

ERROR

$InterfaceId (type: integer)

50016

ProtocolStateEvent

UnknownMessageDiscarded

WARNING

$InterfaceId (type: integer)

50017

ProtocolStateEvent

DeclineSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50018

ProtocolStateEvent

InformSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50019

ProtocolStateEvent

ReleaseSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50020

ProtocolStateEvent

BroadcastbitToggled

INFO

$InterfaceId (type: integer)

$BoolFlag (type: boolean)

50021

ProtocolStateEvent

ErrorExtractingOptions

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50022

AddressConfigurationStateEvent

FallbackConfigSet

INFO

$InterfaceId (type: integer)

$Address (type: integer)

$StatusCode (type: integer)

50023

ProtocolStateEvent

OfferReceiveTimeout

WARNING

$InterfaceId (type: integer)

50024

ProtocolStateEvent

AckReceiveTimeout

WARNING

$InterfaceId (type: integer)

50025

ProtocolStateEvent

CancelRenewal

INFO

$InterfaceId (type: integer)

50028

AddressConfigurationStateEvent

AddressPlumbed

INFO

$Address (type: integer)

$InterfaceId (type: integer)

$StatusCode (type: integer)

50029

AddressConfigurationStateEvent

AddressUnplumbed

INFO

$Address (type: integer)

$InterfaceId (type: integer)

$StatusCode (type: integer)

50030

AddressConfigurationStateEvent

PlumbingError

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50032

AddressConfigurationStateEvent

LeaseExpired

INFO

$InterfaceId (type: integer)

$Address (type: integer)

50033

MediaStateEvent

InterfaceAdded

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50034

AddressConfigurationStateEvent

ErrorInitializeInterface

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50035

AddressConfigurationStateEvent

RouteUpdated

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50036

ServiceStateEvent

ServiceStart

INFO

50037

ServiceStateEvent

ServiceStop

INFO

$DwordVal (type: integer)

50038

ServiceStateEvent

ErrorInitService

ERROR

$StatusCode (type: integer)

50039

WinsockStateEvent

ErrorOpeningSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50040

WinsockStateEvent

ErrorClosingSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50041

DNSStateEvent

DomainChangeNotification

INFO

50042

DNSStateEvent

DnsRegistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword (type: integer)

50043

DNSStateEvent

DnsDeregistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50044

ProtocolStateEvent

InformAckReceived

INFO

$InterfaceId (type: integer)

50053

ProtocolStateEvent

NetworkError

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

50055

AddressConfigurationStateEvent

GatewayReachable

INFO

$Address (type: integer)

$InterfaceId (type: integer)

50056

AddressConfigurationStateEvent

GatewayUnreachable

ERROR

$InterfaceId (type: integer)

50058

AddressConfigurationStateEvent

SuccessfulLease

INFO

50059

AddressConfigurationStateEvent

RouteAdded

INFO

$Str1 (type: string)

$Str2 (type: string)

$Str3 (type: string)

$Str4 (type: string)

50060

AddressConfigurationStateEvent

RouteDeleted

INFO

$Str1 (type: string)

$Str2 (type: string)

$Str3 (type: string)

$Str4 (type: string)

50061

ProtocolStateEvent

OfferReceivedForDiagnostics

INFO

$InterfaceId (type: integer)

50062

AddressConfigurationStateEvent

StartGatewayReachabilityTest

INFO

$Address (type: integer)

$InterfaceId (type: integer)

50063

AddressConfigurationStateEvent

NLANotified

INFO

$InterfaceId (type: integer)

50064

AddressConfigurationStateEvent

CacheScavengerRun

INFO

$InterfaceId (type: integer)

50065

AddressConfigurationStateEvent

NetworkHintMatchFound

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50066

AddressConfigurationStateEvent

MatchedAddressPlumbed

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50067

AddressConfigurationStateEvent

NetworkHintReceived

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50068

AddressConfigurationStateEvent

AddressAlreadyExists

ERROR

$Address (type: integer)

$InterfaceId (type: integer)

50069

ProtocolStateEvent

BroadcastbitCached

INFO

$BoolFlag (type: boolean)

$InterfaceId (type: integer)

50070

AddressConfigurationStateEvent

NetworkHintNotReceived

INFO

$InterfaceId (type: integer)

50071

AddressConfigurationStateEvent

NetworkHintMatchNotFound

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$InterfaceId (type: integer)

50072

ProtocolStateEvent

DiagnosticsInitiated

INFO

$InterfaceId (type: integer)

50073

ProtocolStateEvent

DiagnosticsFailed

INFO

$InterfaceId (type: integer)

50074

ProtocolStateEvent

FirewallPortExempted

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50075

ProtocolStateEvent

FirewallPortClosed

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50076

AddressConfigurationStateEvent

MatchedAddressNotPlumbed

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50077

ProtocolStateEvent

AggressiveRetryOn

INFO

$InterfaceId (type: integer)

50081

ProtocolStateEvent

AbandonDiscovInCSSinceDhcp

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

50083

MediaStateEvent

AcquireNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50084

MediaStateEvent

ReleaseNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50085

ProtocolStateEvent

RegisterConflictDetectionNotification

INFO

$InterfaceId (type: integer)

$Address (type: integer)

50086

ProtocolStateEvent

ConflictDetectionComplete

INFO

$InterfaceId (type: integer)

$Address (type: integer)

$StatusCode (type: integer)

50087

ProtocolStateEvent

ConflictDetectionTentative

INFO

$InterfaceId (type: integer)

$Address (type: integer)

50088

NetworkParameterStateEvent

ParamChangeRegister

INFO

$ProcID (type: integer)

$UniqueID (type: integer)

$EventPath (type: string)

$ClassIDSize (type: integer)

$ClassID (type: string)

$OptListSize (type: integer)

$OptList (type: string)

$IsVendor (type: boolean)

50089

NetworkParameterStateEvent

ParamChangeUnregister

INFO

$ProcID (type: integer)

$UniqueID (type: integer)

50090

NetworkParameterStateEvent

ParamChangeNotification

INFO

$ProcID (type: integer)

$UniqueID (type: integer)

$StatusCode (type: integer)

50091

NetworkParameterStateEvent

ParamRequest

INFO

$InterfaceLUID (type: string)

$ClassIDSize (type: integer)

$ClassID (type: string)

$StandardOptListSize (type: integer)

$StandardOptList (type: string)

$VendorOptListSize (type: integer)

$VendorOptList (type: string)

50092

NetworkParameterStateEvent

ParamRequestUnblocked

INFO

$InterfaceLUID (type: string)

$InterfaceId (type: integer)

50093

NetworkParameterStateEvent

ParamRequestComplete

INFO

$InterfaceLUID (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

$OptDataSize (type: integer)

$OptData (type: string)

50094

ProtocolStateEvent

FirewallPortExemptionTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50095

ProtocolStateEvent

FirewallPortCloseTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

50096

ProtocolStateEvent

AbandonDiscovInCSSinceStateless

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

50097

ProtocolStateEvent

AbandonDiscovInCSSinceStatic

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

50098

ProtocolStateEvent

DontStartDiscovInCSSinceV6Plumbed

INFO

$InterfaceId (type: integer)

$Address (type: string)

50099

ProtocolStateEvent

StartDiscovInCSSinceV6Unplumbed

INFO

$InterfaceId (type: integer)

50100

ProtocolStateEvent

StartDiscovInCSAtCompulsoryTime

INFO

$InterfaceId (type: integer)

50101

NetworkParameterStateEvent

NotifyCSEntry

INFO

50102

NetworkParameterStateEvent

NotifyCSExit

INFO

50103

ServiceStateEvent

ServiceShutdown

INFO

50104

ServiceStateEvent

ServiceShutdown

INFO

50105

ServiceStateEvent

ServiceShutdown

INFO

50106

ServiceStateEvent

ServiceShutdown

INFO

60000

ProtocolStateEvent

PerfTrackAckConfirm

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60001

ProtocolStateEvent

PerfTrackAckDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60002

AddressConfigurationStateEvent

PerfTrackGatewayReachable

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60003

AddressConfigurationStateEvent

PerfTrackStatic

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60004

AddressConfigurationStateEvent

PerfTrackFallbackAddressSet

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

60005

ProtocolStateEvent

PerfTrackToggleRequestAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60006

ProtocolStateEvent

PerfTrackToggleDORAAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60007

ProtocolStateEvent

PerfTrackToggleInitDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60010

ProtocolStateEvent

PerfTrackAckConfirm

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60011

ProtocolStateEvent

PerfTrackAckDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60012

AddressConfigurationStateEvent

PerfTrackGatewayReachable

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60013

AddressConfigurationStateEvent

PerfTrackStatic

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60014

AddressConfigurationStateEvent

PerfTrackFallbackAddressSet

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

60015

ProtocolStateEvent

PerfTrackToggleRequestAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60016

ProtocolStateEvent

PerfTrackToggleDORAAck

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60017

ProtocolStateEvent

PerfTrackToggleInitDORA

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: integer)

$Address2 (type: integer)

60018

MediaStateEvent

PerfTrackMediaConnect

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60019

MediaStateEvent

PerfTrackMediaConnectEnd

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60020

MediaStateEvent

PerfTrackMediaReconnect

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60021

ProtocolStateEvent

PerfTrackDiscoverNetworkLatency

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60022

ProtocolStateEvent

PerfTrackDiscoverTimeout

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60023

ProtocolStateEvent

PerfTrackRequestNetworkLatency

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60024

ProtocolStateEvent

PerfTrackRequestNoResponse

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60025

AddressConfigurationStateEvent

PerfTrackFallbackAfterDiscover

INFO

$InterfaceGuid (type: string)

$Address (type: integer)

$InterfaceId (type: integer)

60026

AddressConfigurationStateEvent

ProcessDHCPRequestForeverEntered

INFO

60027

AddressConfigurationStateEvent

ProcessDHCPRequestForeverTimedout

INFO

60028

AddressConfigurationStateEvent

CreateRenewalSignalHandleFailed

ERROR

$StatusCode (type: integer)

60029

AddressConfigurationStateEvent

DeleteRenewTimerFailed

ERROR

$StatusCode (type: integer)

60030

AddressConfigurationStateEvent

ResetRenewalSignalHandleFailed

ERROR

$StatusCode (type: integer)

60031

AddressConfigurationStateEvent

CreateRenewTimerFailed

ERROR

$StatusCode (type: integer)

60032

AddressConfigurationStateEvent

ProcessDHCPRequestForeverFailed

ERROR

$StatusCode (type: integer)

Microsoft-Windows-DHCPv6-Client

1000

AddressConfigurationStateEvent

LostIpAddress

ERROR

$InterfaceGUID (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1003

AddressConfigurationStateEvent

LeaseRenewalFailed

ERROR

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

1004

ServiceStateEvent

ErrorServiceStop

ERROR

$StatusCode (type: integer)

$DwordVal (type: integer)

1005

AddressConfigurationStateEvent

IPConflict

WARNING

$InterfaceGUID (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1006

MediaStateEvent

RAChanged

INFO

$InterfaceId (type: integer)

$Flag1 (type: boolean)

$Flag2 (type: boolean)

1008

AddressConfigurationStateEvent

InitNetworkInterfaceFailed

ERROR

$StatusCode (type: integer)

1009

ServiceStateEvent

DHCPv6DUIDValidationFailed

INFO

$HWLength (type: integer)

$HWAddress (type: string)

$DUIDLength (type: integer)

$DUID (type: string)

$NewHWLength (type: integer)

$NewHWAddress (type: string)

$NewDUIDLength (type: integer)

$NewDUID (type: string)

1010

AddressConfigurationStateEvent

DHCPv6NetworkHintMatch

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1011

AddressConfigurationStateEvent

DHCPv6NetworkHintStatefullConfig

INFO

$Address1 (type: string)

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1012

AddressConfigurationStateEvent

DHCPv6NetworkHintStatelessConfig

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

1013

AddressConfigurationStateEvent

DHCPv6NetworkHintConfigExpired

INFO

$NetworkHintString (type: string)

$NetworkHint (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

50057

ProtocolStateEvent

NetworkError

ERROR

$StatusCode (type: integer)

50071

MediaStateEvent

AcquireNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

50072

MediaStateEvent

ReleaseNICReference

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51001

MediaStateEvent

MediaConnect

INFO

$InterfaceId (type: integer)

51002

MediaStateEvent

MediaDisconnect

INFO

$InterfaceId (type: integer)

51004

ProtocolStateEvent

InitConfirmReply

INFO

$InterfaceId (type: integer)

51005

ProtocolStateEvent

InitSARR

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51006

ProtocolStateEvent

SolicitSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51007

ProtocolStateEvent

AdvertiseReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Address (type: string)

51008

ProtocolStateEvent

AdvertiseDiscarded

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51009

ProtocolStateEvent

RequestSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51010

ProtocolStateEvent

ReplyForRequestReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Address (type: string)

51011

ProtocolStateEvent

InvalidReplyForRequestReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51012

ProtocolStateEvent

RenewSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51013

ProtocolStateEvent

ReplyForRenewReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51014

ProtocolStateEvent

InvalidReplyForRenewReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51015

ProtocolStateEvent

RebindSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51016

ProtocolStateEvent

ReplyForRebindReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51017

ProtocolStateEvent

InvalidReplyForRebindReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51018

ProtocolStateEvent

ReleaseSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51019

ProtocolStateEvent

DeclineSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51020

ProtocolStateEvent

ReplyForDeclineReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51021

ProtocolStateEvent

InvalidReplyForDeclineReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51022

ProtocolStateEvent

ConfirmSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51023

ProtocolStateEvent

ReplyForConfirmReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51024

ProtocolStateEvent

InvalidReplyForConfirmReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51025

ProtocolStateEvent

InfoRequestSent

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51026

ProtocolStateEvent

ReplyForInfoRequestReceived

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51027

ProtocolStateEvent

InvalidReplyForInfoRequestReceived

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51029

ProtocolStateEvent

ErrorCreatingPacket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51030

ProtocolStateEvent

ErrorExtractingOptions

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51031

AddressConfigurationStateEvent

StatefulToStateless

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword1 (type: integer)

$Dword2 (type: integer)

51032

AddressConfigurationStateEvent

StatelessToStateful

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51033

AddressConfigurationStateEvent

NonDhcpToStateful

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51034

AddressConfigurationStateEvent

NonDhcpToStateless

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword1 (type: integer)

$Dword2 (type: integer)

51035

AddressConfigurationStateEvent

StaticMode

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51036

ProtocolStateEvent

ErrorInParsing

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51037

ProtocolStateEvent

InformationRefreshTimeOptionReceived

INFO

$InterfaceId (type: integer)

$RefreshTime (type: integer)

51038

ProtocolStateEvent

InformationRefreshTimeExpired

INFO

$InterfaceId (type: integer)

51039

AddressConfigurationStateEvent

AddressPlumbed

INFO

$Address (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

51040

AddressConfigurationStateEvent

AddressUnplumbed

INFO

$Address (type: string)

$InterfaceId (type: integer)

$StatusCode (type: integer)

51043

MediaStateEvent

InterfaceAdded

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51044

AddressConfigurationStateEvent

ErrorInitializingInterface

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51045

AddressConfigurationStateEvent

ErrorPlumbingParameters

ERROR

$StatusCode (type: integer)

51046

ServiceStateEvent

ServiceStart

INFO

51047

ServiceStateEvent

ServiceStop

INFO

$DwordVal (type: integer)

51048

WinsockStateEvent

ErrorOpeningSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51049

WinsockStateEvent

ErrorClosingSocket

ERROR

$InterfaceId (type: integer)

$StatusCode (type: integer)

51050

DNSStateEvent

DnsRegistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

$Dword (type: integer)

51051

DNSStateEvent

dnsDeregistrationDone

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51057

ServiceStateEvent

ServiceStopWithRefCount

INFO

$DwordVal (type: integer)

51058

AddressConfigurationStateEvent

StatefulToStateful

INFO

$InterfaceId (type: integer)

$StatusCode (type: integer)

51059

ProtocolStateEvent

InvalidMessageDiscarded

ERROR

51060

AddressConfigurationStateEvent

SetClassID

INFO

$InterfaceGUID (type: string)

$HWLength (type: integer)

$HWAddress (type: string)

51061

AddressConfigurationStateEvent

AddressAlreadyExists

ERROR

$Address (type: string)

$InterfaceId (type: integer)

51062

AddressConfigurationStateEvent

FailedToObtainLease

ERROR

$HWLength (type: integer)

$HWAddress (type: string)

$StatusCode (type: integer)

51063

ProtocolStateEvent

FirewallPortExempted

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51064

ProtocolStateEvent

FirewallPortClosed

INFO

$DwordVal (type: integer)

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51065

AddressConfigurationStateEvent

ModeChanging

INFO

$InterfaceId (type: integer)

$NewMode (type: integer)

51066

ProtocolStateEvent

AggressiveRetryOn

INFO

$InterfaceId (type: integer)

51067

ProtocolStateEvent

AbandonSolicitInCSSinceDhcp

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address1 (type: integer)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51068

ProtocolStateEvent

AbandonSolicitInCSSinceStatic

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address1 (type: integer)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51069

ProtocolStateEvent

DontStartSolicitInCSSinceV4Plumbed

INFO

$InterfaceId (type: integer)

$Address1 (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51070

ProtocolStateEvent

StartSolicitInCSSinceV4Unplumbed

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51073

ProtocolStateEvent

FirewallPortExemptionTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51074

ProtocolStateEvent

FirewallPortCloseTriggered

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51075

NetworkParameterStateEvent

NotifyCSEntry

INFO

51076

NetworkParameterStateEvent

NotifyCSExit

INFO

51077

ProtocolStateEvent

StartSolicitInCSAtCompulsoryTime

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

51078

ProtocolStateEvent

EnableDhcpV6

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51079

ProtocolStateEvent

DisableDhcpV6

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

51080

ProtocolStateEvent

NoProcessingSinceDhcpV6Disabled

INFO

$InterfaceId (type: integer)

51081

ProtocolStateEvent

AbandonSolicitInCSSinceV6Static

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51082

ProtocolStateEvent

AbandonSolicitInCSSinceV6Stateless

INFO

$DwordVal1 (type: integer)

$InterfaceId (type: integer)

$Address (type: string)

$DwordVal2 (type: integer)

$DwordVal3 (type: integer)

51083

ProtocolStateEvent

AbandonSolicitSinceNonMulticast

INFO

$InterfaceId (type: integer)

51084

ProtocolStateEvent

NoteFlagValues

INFO

$InterfaceId (type: integer)

$DwordVal1 (type: integer)

$DwordVal2 (type: integer)

60000

ProtocolStateEvent

PerfTrackSARR

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

$Address1 (type: string)

60001

ProtocolStateEvent

PerfTrackInfoRequest

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60002

MediaStateEvent

PerfTrackMediaConnect

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

60003

MediaStateEvent

PerfTrackMediaConnectEnd

INFO

$InterfaceGuid (type: string)

$InterfaceId (type: integer)

Microsoft-Windows-Directory-Services-SAM-Utility

1

task_0

Opcode_SamDatabaseChangeEvent

INFO

Microsoft-Windows-Directory-Services-SAM

12288

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

12289

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

12291

task_0

-

ERROR

$__binLength (type: integer)

$LogStatus (type: string)

12293

task_0

-

ERROR

$AccountDistinguishedName (type: string)

12294

task_0

-

ERROR

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

12295

task_0

-

INFO

$FilePath (type: string)

$__binLength (type: integer)

$WinError (type: string)

12296

task_0

-

INFO

$DirectoryPath (type: string)

$__binLength (type: integer)

$WinError (type: string)

12297

task_0

-

INFO

$ComputerName (type: string)

12298

task_0

-

ERROR

$ComputerName (type: string)

12299

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

12300

task_0

-

INFO

12301

task_0

-

INFO

12302

task_0

-

ERROR

$SecurityPackage (type: string)

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

12303

task_0

-

ERROR

$AccountDistinguishedName (type: string)

12304

task_0

-

INFO

$AccountDistinguishedName (type: string)

$SystemAssignedAccountName (type: string)

12305

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16384

task_0

-

INFO

$AccountName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16385

task_0

-

WARNING

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16386

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16387

task_0

-

WARNING

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16388

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16389

task_0

-

WARNING

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16390

task_0

-

WARNING

$__binLength (type: integer)

$ErrorCode (type: string)

16391

task_0

-

WARNING

$AccountDistinguishedName (type: string)

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16392

task_0

-

WARNING

$AccountSID (type: string)

$AccountDistinguishedName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16393

task_0

-

WARNING

$AccountDistinguishedName (type: string)

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16394

task_0

-

WARNING

$AccountRID (type: integer)

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16395

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16398

task_0

-

ERROR

$SecurityPackage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16399

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16400

task_0

-

INFO

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16401

task_0

-

INFO

$AccountName (type: string)

$GroupName (type: string)

$ErrorMessage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16402

task_0

-

INFO

$AccountName (type: string)

$GroupName (type: string)

$ErrorMessage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16403

task_0

-

INFO

$AccountName (type: string)

$ErrorMessage (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16405

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16406

task_0

-

WARNING

$UserName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16407

task_0

-

WARNING

$GroupName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16408

task_0

-

INFO

16409

task_0

-

ERROR

$AccountName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16410

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16411

task_0

-

ERROR

$AccountName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16412

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16413

task_0

-

INFO

$AccountName (type: string)

$GroupName (type: string)

$ErrorString (type: string)

$__binLength (type: integer)

$BinaryData (type: string)

16642

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16643

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16644

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16645

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16646

task_0

-

ERROR

$ComputedRIDValue (type: integer)

$__binLength (type: integer)

$ErrorCode (type: string)

16647

task_0

-

INFO

16648

task_0

-

INFO

$__binLength (type: integer)

$ErrorCode (type: string)

16649

task_0

-

ERROR

$__binLength (type: integer)

$ErrorCode (type: string)

16651

task_0

-

ERROR

$ErrorMessage (type: string)

16652

task_0

-

INFO

16653

task_0

-

WARNING

$Maximum (type: integer)

16654

task_0

-

INFO

16655

task_0

-

INFO

$NewValue (type: integer)

16656

task_0

-

WARNING

$CeilingTriggerRid (type: integer)

16657

task_0

-

ERROR

$CeilingTriggerRid (type: integer)

16658

task_0

-

WARNING

$RemainingRids (type: integer)

16935

task_0

-

ERROR

$ComputerName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16936

task_0

-

ERROR

$ComputerName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16937

task_0

-

INFO

$ComputerName (type: string)

$__binLength (type: integer)

$ErrorCode (type: string)

16944

task_0

-

INFO

$OID (type: string)

$ErrorCode (type: integer)

16945

task_0

-

INFO

$OID (type: string)

$OIDObjectDN (type: string)

$ErrorCode (type: integer)

16946

task_0

-

INFO

$OID (type: string)

16947

task_0

-

ERROR

$OID (type: string)

$OIDObjectDN (type: string)

$GroupDN (type: string)

$GroupGUID (type: string)

$GroupSID (type: string)

$ErrorCode (type: integer)

16948

task_0

-

ERROR

$GroupDN (type: string)

$GroupGUID (type: string)

$GroupSID (type: string)

$Operation (type: string)

$ErrorCode (type: integer)

16949

task_0

-

ERROR

$OIDName (type: string)

$GroupName (type: string)

$GroupGUID (type: string)

$GroupSID (type: string)

$ErrorCode (type: integer)

16950

task_0

-

WARNING

$User (type: string)

$DroppedClaims (type: string)

16951

task_0

-

WARNING

$User (type: string)

$Errorcode (type: integer)

16952

task_0

-

ERROR

$User (type: string)

$Errorcode (type: integer)

16953

task_0

-

ERROR

$NotificationPackage (type: string)

$Registrykey (type: string)

$Registryvalue (type: string)

$Errorcode (type: integer)

16960

task_0

-

INFO

16961

task_0

-

WARNING

16962

task_0

-

INFO

$DefaultSDString (type: string)

16963

task_0

-

INFO

$RegistrySDString (type: string)

16964

task_0

-

WARNING

$MalformedSDString (type: string)

$DefaultSDString (type: string)

16965

task_0

-

WARNING

$ClientSID (type: string)

$ClientNetworkAddress (type: string)

16966

task_0

-

INFO

16967

task_0

-

INFO

16968

task_0

-

WARNING

$ClientSID (type: string)

$ClientNetworkAddress (type: string)

16969

task_0

-

WARNING

$Throttlewindow (type: integer)

$SuppressedMessageCount (type: integer)

16976

task_0

-

ERROR

$Status (type: string)

16977

task_0

-

INFO

$MinimumPasswordLength (type: integer)

$MinimumPasswordLengthAudit (type: integer)

16978

task_0

-

INFO

$AccountName (type: string)

$MinimumPasswordLength (type: integer)

$MinimumPasswordLengthAudit (type: integer)

16979

task_0

-

ERROR

$MinimumPasswordLength (type: integer)

16982

task_0

-

INFO

16983

task_0

-

INFO

16984

task_0

-

INFO

$NumberofRPCmethods (type: integer)

$ThrottleWindow (type: integer)

16985

task_0

-

INFO

$RPCMethod (type: string)

$UserAccountName (type: string)

$ClientSID (type: string)

$ClientNetworkAddress (type: string)

16986

task_0

-

WARNING

$AccountRidHex (type: string)

$AccountRid (type: integer)

$SavedAccountName (type: string)

$DeletedAccountNames (type: string)

16987

task_0

-

WARNING

$AccountRidHex (type: string)

$AccountRid (type: integer)

$DuplicatedAccountNames (type: string)

$RetainedAccountName (type: string)

16990

task_0

-

ERROR

$Accountname (type: string)

$AccountobjectClass (type: string)

$userAccountcontrol (type: integer)

$Calleraddress (type: string)

$CallerSID (type: string)

16991

task_0

-

ERROR

$SamAccountName (type: string)

Microsoft-Windows-DNS-Client

1000

DnsNoServerConfigV4

-

INFO

$Location (type: integer)

$Context (type: integer)

1001

DnsServerForInterface

-

INFO

$Interface (type: string)

$TotalServerCount (type: integer)

$Index (type: integer)

$DynamicAddress (type: integer)

$AddressLength (type: integer)

$Address (type: string)

1002

DnsServerQueryChange

-

INFO

$Interface (type: string)

$AddressLength (type: integer)

$Address (type: string)

1003

DnsServerValidationSuccess

-

INFO

$AddressLength (type: integer)

$Address (type: string)

1005

DnsServerValidationFailure

-

ERROR

$AddressLength (type: integer)

$Address (type: string)

1007

DnsMissingPrimarySuffix

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1008

DnsMissingPrimarySuffixSystem

-

WARNING

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1009

DnsNonMatchingSuffix

-

ERROR

$DnsSuffix (type: string)

$AdSuffix (type: string)

1010

DnsNonMatchingSuffixSystem

-

WARNING

$DnsSuffix (type: string)

$AdSuffix (type: string)

1011

DnsHostFileError

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1012

DnsHostFileErrorSystem

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

1013

DnsAllServersTimeout

-

ERROR

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1014

DnsAllServersTimeoutSystem

-

WARNING

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1015

DnsServerTimeout

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1016

DnsNameError

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1017

DnsAuthoritativeResponse

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1018

DnsLinkLocal

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

$DnsAddressLength (type: integer)

$DnsAddress (type: string)

1019

DnsNoServerConfigV6

-

INFO

$Location (type: integer)

$Context (type: integer)

1020

DnsReadPolicyTable

-

INFO

$KeyName (type: string)

$DnsSecValidationRequired (type: integer)

$DnsQueryOverIPSec (type: integer)

$DnsEncryption (type: integer)

$DirectAccessServerList (type: string)

$RemoteIPSEC (type: integer)

$RemoteEncryption (type: integer)

$ProxyType (type: integer)

$ProxyName (type: string)

1021

DnsMatchPolicyInfo

-

INFO

$QueryName (type: string)

$KeyName (type: string)

$DnsSecValidationRequired (type: integer)

$DnsQueryOverIPSec (type: integer)

$DnsEncryption (type: integer)

$DirectAccessServerList (type: string)

$ProxyType (type: integer)

$ProxyName (type: string)

1022

DnsSecureNoFallback

-

INFO

$QueryName (type: string)

1023

DnsPolicySystemReadError

-

ERROR

$RuleName (type: string)

$ErrorCode (type: integer)

1024

DnsQueryBadXid

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1025

DnsQueryInvalidServerIp

-

INFO

$QueryName (type: string)

$AddressLength (type: integer)

$Address (type: string)

1026

DnsQueryInvalidQuestion

-

INFO

$QueryName (type: string)

$ResponseQuestion (type: string)

$AddressLength (type: integer)

$Address (type: string)

1027

task_0

-

INFO

$QueryName (type: string)

1028

DnsMatchPolicyInfo

-

INFO

$QueryName (type: string)

$KeyName (type: string)

$DnsSecValidationRequired (type: integer)

$DnsQueryOverIPSec (type: integer)

$DnsEncryption (type: integer)

$DirectAccessServerList (type: string)

$ProxyType (type: integer)

$ProxyName (type: string)

$GenericServerList (type: string)

$IdnConfig (type: integer)

3000

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

3001

task_0

-

INFO

$Status (type: integer)

3002

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

3003

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$Status (type: integer)

3004

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

3005

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$Status (type: integer)

3006

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

$ServerList (type: string)

$IsNetworkQuery (type: integer)

$NetworkQueryIndex (type: integer)

$InterfaceIndex (type: integer)

$IsAsyncQuery (type: integer)

3007

task_0

-

INFO

$QueryName (type: string)

3008

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

$QueryStatus (type: integer)

$QueryResults (type: string)

3009

task_0

-

INFO

$QueryName (type: string)

$IsParallelNetworkQuery (type: integer)

$NetworkIndex (type: integer)

$InterfaceCount (type: integer)

$AdapterName (type: string)

$LocalAddress (type: string)

$DNSServerAddress (type: string)

3010

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$DnsServerIpAddress (type: string)

3011

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$DnsServerIpAddress (type: string)

$ResponseStatus (type: integer)

3012

task_0

-

INFO

$QueryName (type: string)

$NetworkIndex (type: integer)

$InterfaceCount (type: integer)

$AdapterName (type: string)

$LocalAddress (type: string)

3013

task_0

-

INFO

$QueryName (type: string)

$Status (type: integer)

$QueryResults (type: string)

3014

task_0

-

INFO

$QueryName (type: string)

3015

task_0

-

INFO

$QueryName (type: string)

3016

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

$InterfaceIndex (type: integer)

3018

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$QueryOptions (type: integer)

$Status (type: integer)

$QueryResults (type: string)

3019

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$InterfaceIndex (type: integer)

$NetworkIndex (type: integer)

3020

task_0

-

INFO

$QueryName (type: string)

$QueryType (type: integer)

$NetworkIndex (type: integer)

$InterfaceIndex (type: integer)

$Status (type: integer)

$QueryResults (type: string)

8001

DnsGenericError

-

ERROR

$ErrorCode (type: integer)

8002

DnsGenericError

-

ERROR

$ErrorCode (type: integer)

8003

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8004

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8005

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8006

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8007

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8008

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8009

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8010

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8011

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8012

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8013

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8014

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8015

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8016

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8017

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8018

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8019

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8020

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8021

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8022

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8023

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8024

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8025

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8026

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8027

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8028

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8029

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8030

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8031

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8032

DnsRegistration

-

INFO

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8033

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8034

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8035

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8036

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8037

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8038

DnsRegistration

-

WARNING

$AdapterName (type: string)

$HostName (type: string)

$AdapterSuffixName (type: string)

$DnsServerList (type: string)

$SentUpdateServer (type: string)

$Ipaddress (type: string)

$ErrorCode (type: integer)

8040

DnsInterception

-

WARNING

$DllName (type: string)

8042

DnsInterception

-

ERROR

$DllName (type: string)

60004

DnsNetError

-

ERROR

$ErrorCode (type: integer)

$Location (type: integer)

$Context (type: integer)

60005

DnsNetWarning

-

WARNING

$WarningCode (type: integer)

$Location (type: integer)

$Context (type: integer)

60006

DnsStateTransition

-

INFO

$NextState (type: integer)

$Context (type: integer)

60007

DnsContextUpdate

-

INFO

$Context (type: integer)

$UpdateReasonCode (type: integer)

60008

DnsPolicyReadError

-

ERROR

$RuleName (type: string)

$ErrorCode (type: integer)

60101

DnsV4Tuple

-

INFO

$SourceAddress (type: integer)

$SourcePort (type: integer)

$DestinationAddress (type: integer)

$DestinationPort (type: integer)

$Protocol (type: integer)

$ReferenceContext (type: integer)

60102

DnsV6Tuple

-

INFO

$SourceAddress (type: string)

$SourcePort (type: integer)

$DestinationAddress (type: string)

$DestinationPort (type: integer)

$Protocol (type: integer)

$ReferenceContext (type: integer)

60103

DnsInterfaceInfo

-

INFO

$IfGuid (type: string)

$IfIndex (type: integer)

$IfLuid (type: integer)

$ReferenceContext (type: integer)

Microsoft-Windows-Firewall-CPL

101

FwCplInitialize

win:Start

INFO

102

FwCplInitialize

win:Stop

INFO

103

LoadExceptionsInitialize

win:Start

INFO

104

LoadExceptionsInitialize

win:Stop

INFO

105

SetFirewallOn

win:Start

INFO

106

SetFirewallOn

win:Stop

INFO

107

SetFirewallOff

win:Start

INFO

108

SetFirewallOff

win:Stop

INFO

109

AddAppException

win:Start

INFO

110

AddAppException

win:Stop

INFO

111

AddPortException

win:Start

INFO

112

AddPortException

win:Stop

INFO

113

QUInitialize

win:Start

INFO

114

QUInitialize

win:Stop

INFO

115

QUUnblock

win:Start

INFO

116

QUUnblock

win:Stop

INFO

117

QUAskLater

win:Start

INFO

118

QUAskLater

win:Stop

INFO

Microsoft-Windows-Firewall

6400

task_0

-

ERROR

$CallerProcessName (type: string)

$ProcessId (type: integer)

$Publisher (type: string)

Microsoft-Windows-Kernel-Power

1

PowerTransition

win:Start

CRITICAL

$Reason (type: integer)

$Flags (type: integer)

$Time (type: string)

2

PowerTransition

win:Stop

CRITICAL

$Status (type: integer)

$Time (type: string)

3

QueryApps

PhaseStart

INFO

4

QueryApps

PhaseStop

INFO

$Status (type: integer)

5

QueryServices

PhaseStart

INFO

6

QueryServices

PhaseStop

INFO

$Status (type: integer)

7

Irp

win:Start

INFO

$Irp (type: string)

$PowerStateType (type: integer)

$MinorFunction (type: integer)

$TargetDevice (type: string)

$InstanceNameLength (type: integer)

$InstanceName (type: string)

7

Irp

win:Start

INFO

$Irp (type: string)

$PowerStateType (type: integer)

$MinorFunction (type: integer)

$TargetDevice (type: string)

$InstanceNameLength (type: integer)

$InstanceName (type: string)

$PowerState (type: integer)

8

Irp

win:Stop

INFO

$Irp (type: string)

$Status (type: integer)

$FailedDriver (type: string)

9

QueryApps

Veto

INFO

$Pid (type: integer)

$Window (type: string)

$AppNameLength (type: integer)

$AppName (type: string)

10

QueryServices

Veto

INFO

$Pid (type: integer)

$ServiceNameLength (type: integer)

$ServiceName (type: string)

11

IrpWaiting

-

INFO

$Irp (type: string)

12

QueryApps

win:Start

INFO

$Pid (type: integer)

$NameLength (type: integer)

$Name (type: string)

13

QueryApps

win:Stop

INFO

$Pid (type: integer)

14

QueryServices

win:Start

INFO

$NameLength (type: integer)

$Name (type: string)

15

QueryServices

win:Stop

INFO

$NameLength (type: integer)

$Name (type: string)

16

SuspendApps

win:Start

INFO

$Pid (type: integer)

$NameLength (type: integer)

$Name (type: string)

17

SuspendApps

win:Stop

INFO

$Pid (type: integer)

18

SuspendServices

win:Start

INFO

$NameLength (type: integer)

$Name (type: string)

19

SuspendServices

win:Stop

INFO

$NameLength (type: integer)

$Name (type: string)

20

Driver

win:Start

INFO

$Irp (type: string)

$Device (type: string)

$DriverName (type: string)

21

Driver

win:Stop

INFO

$Irp (type: string)

$Device (type: string)

22

SuspendApps

PhaseStart

INFO

23

SuspendApps

PhaseStop

INFO

24

SuspendServices

PhaseStart

INFO

25

SuspendServices

PhaseStop

INFO

26

ResumeApps

PhaseStart

INFO

27

ResumeServices

PhaseStart

INFO

28

ResumeApps

win:Start

INFO

$Pid (type: integer)

$NameLength (type: integer)

$Name (type: string)

29

ResumeServices

win:Start

INFO

$NameLength (type: integer)

$Name (type: string)

30

QueryFailedApps

-

INFO

31

QueryFailedServices

-

INFO

32

QueryFailedApp

-

INFO

$Pid (type: integer)

$NameLength (type: integer)

$Name (type: string)

33

QueryFailedService

-

INFO

$NameLength (type: integer)

$Name (type: string)

34

Hibernate

-

INFO

$Status (type: integer)

35

SuspendDevices

PhaseStart

INFO

$Query (type: boolean)

$TargetState (type: integer)

$EffectiveState (type: integer)

36

SuspendDevices

PhaseStop

INFO

37

WakeDevices

PhaseStart

INFO

38

WakeDevices

PhaseStop

INFO

39

PowerTransition

-

INFO

$SleepTime (type: integer)

$ResumeTime (type: integer)

$DriverWakeTime (type: integer)

$HiberWriteTime (type: integer)

$HiberReadTime (type: integer)

$HiberPagesWritten (type: integer)

$BiosInitTime (type: integer)

40

QueryDrivers

Veto

INFO

$DriverNameLength (type: integer)

$DriverName (type: string)

$InstanceNameLength (type: integer)

$InstanceName (type: string)

41

DirtyTransition

-

CRITICAL

41

DirtyTransition

-

CRITICAL

$BugcheckCode (type: integer)

$BugcheckParameter (type: string)

41

DirtyTransition

-

CRITICAL

$BugcheckCode (type: integer)

$BugcheckParameter1 (type: string)

$BugcheckParameter2 (type: string)

$BugcheckParameter3 (type: string)

$BugcheckParameter4 (type: string)

$SleepInProgress (type: boolean)

$PowerButtonTimestamp (type: integer)

$BootAppStatus (type: integer)

41

DirtyTransition

-

CRITICAL

$BugcheckCode (type: integer)

$BugcheckParameter1 (type: string)

$BugcheckParameter2 (type: string)

$BugcheckParameter3 (type: string)

$BugcheckParameter4 (type: string)

$SleepInProgress (type: integer)

$PowerButtonTimestamp (type: integer)

$BootAppStatus (type: integer)

41

DirtyTransition

-

CRITICAL

$BugcheckCode (type: integer)

$BugcheckParameter1 (type: string)

$BugcheckParameter2 (type: string)

$BugcheckParameter3 (type: string)

$BugcheckParameter4 (type: string)

$SleepInProgress (type: integer)

$PowerButtonTimestamp (type: integer)

$BootAppStatus (type: integer)

$Checkpoint (type: integer)

$ConnectedStandbyInProgress (type: boolean)

$SystemSleepTransitionsToOn (type: integer)

$CsEntryScenarioInstanceId (type: integer)

41

DirtyTransition

-

CRITICAL

$BugcheckCode (type: integer)

$BugcheckParameter1 (type: string)

$BugcheckParameter2 (type: string)

$BugcheckParameter3 (type: string)

$BugcheckParameter4 (type: string)

$SleepInProgress (type: integer)

$PowerButtonTimestamp (type: integer)

$BootAppStatus (type: integer)

$Checkpoint (type: integer)

$ConnectedStandbyInProgress (type: boolean)

$SystemSleepTransitionsToOn (type: integer)

$CsEntryScenarioInstanceId (type: integer)

$BugcheckInfoFromEFI (type: boolean)

41

DirtyTransition

-

CRITICAL

$BugcheckCode (type: integer)

$BugcheckParameter1 (type: string)

$BugcheckParameter2 (type: string)

$BugcheckParameter3 (type: string)

$BugcheckParameter4 (type: string)

$SleepInProgress (type: integer)

$PowerButtonTimestamp (type: integer)

$BootAppStatus (type: integer)

$Checkpoint (type: integer)

$ConnectedStandbyInProgress (type: boolean)

$SystemSleepTransitionsToOn (type: integer)

$CsEntryScenarioInstanceId (type: integer)

$BugcheckInfoFromEFI (type: boolean)

$CheckpointStatus (type: integer)

42

PreSleepNotification

-

INFO

$TargetState (type: integer)

$EffectiveState (type: integer)

42

PreSleepNotification

-

INFO

$TargetState (type: integer)

$EffectiveState (type: integer)

$Reason (type: integer)

$Flags (type: integer)

42

PreSleepNotification

-

INFO

$TargetState (type: integer)

$EffectiveState (type: integer)

$Reason (type: integer)

$Flags (type: integer)

$TransitionsToOn (type: integer)

43

ZeroHiberFile

win:Start

INFO

44

ZeroHiberFile

win:Stop

INFO

45

FlushVolumes

win:Start

INFO

46

FlushVolumes

win:Stop

INFO

47

GracefulShutdown

win:Start

INFO

48

GracefulShutdown

win:Stop

INFO

49

ZeroPageFile

win:Start

INFO

50

ZeroPageFile

win:Stop

INFO

51

IoShutdownSystem

win:Start

INFO

52

IoShutdownSystem

win:Stop

INFO

53

WaitForProcesses

win:Start

INFO

54

WaitForProcesses

win:Stop

INFO

55

CmShutdownSystem

win:Start

INFO

56

CmShutdownSystem

win:Stop

INFO

57

ShowUI

PhaseStart

INFO

58

ShowUI

PhaseStop

INFO

59

AwayMode

-

INFO

60

UserQueryAllowed

-

INFO

$Value (type: boolean)

61

KernelQueryAllowed

-

INFO

$Value (type: boolean)

62

SetExecutionState

-

INFO

$ExecutionState (type: integer)

$AppNameLength (type: integer)

$AppName (type: string)

62

SetExecutionState

-

INFO

$ExecutionState (type: integer)

$AppNameLength (type: integer)

$AppName (type: string)

$Pid (type: integer)

$Tid (type: integer)

63

SystemTimeResolutionChange

-

INFO

$ExecutionState (type: integer)

$AppNameLength (type: integer)

$AppName (type: string)

63

SystemTimeResolutionChange

-

INFO

$RequestedResolution (type: integer)

$Pid (type: integer)

$AppNameLength (type: integer)

$AppName (type: string)

$SubProcessTag (type: integer)

64

Superfetch

PhaseStart

INFO

65

Superfetch

PhaseStop

INFO

66

Winlogon

PhaseStart

INFO

67

Winlogon

PhaseStop

INFO

68

PreSleepCallbacks

PhaseStart

INFO

69

PreSleepCallbacks

PhaseStop

INFO

70

HideUI

PhaseStart

INFO

71

HideUI

PhaseStop

INFO

72

IdleCheck

-

INFO

$Threshold (type: integer)

$LowestIdleness (type: integer)

$AverageIdleness (type: integer)

$AccruedIdleTime (type: integer)

$NonIdleIgnored (type: boolean)

$IdleToSleep (type: boolean)

$NonIdleReferences (type: boolean)

73

SetSystemState

-

INFO

$ExecutionState (type: integer)

74

RegisterSystemState

-

INFO

$ExecutionState (type: integer)

$StateHandle (type: string)

75

DeviceIdle

win:Start

INFO

76

DeviceIdle

win:Stop

INFO

77

DeviceIdleCheck

-

INFO

$Device (type: string)

$Pdo (type: string)

$InstancePathLength (type: integer)

$InstancePath (type: string)

$ConservativeTimeout (type: integer)

$PerformanceTimeout (type: integer)

$IdleTime (type: integer)

$BusyCount (type: integer)

$TotalBusyCount (type: integer)

$IdlePowerState (type: integer)

$CurrentPowerState (type: integer)

78

DiskIdleCheck

-

INFO

$Device (type: string)

$Timeout (type: integer)

$IgnoreThreshold (type: integer)

$IdleTime (type: integer)

$NonIdleTime (type: integer)

79

SkipTick

-

INFO

$Disabled (type: boolean)

$Overridden (type: boolean)

80

CoolingModeChange

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$CoolingModeLength (type: integer)

$CoolingMode (type: string)

81

PassiveCoolingDiagnostic

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$PassiveCoolingStateLength (type: integer)

$PassiveCoolingState (type: string)

$AffinityCount (type: integer)

$_PSV (type: integer)

$_TMP (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$DeltaP (type: integer)

$_PSL (type: boolean)

82

PassiveCoolingOperational

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$PassiveCoolingStateLength (type: integer)

$PassiveCoolingState (type: string)

$AffinityCount (type: integer)

$_PSV (type: integer)

$_TMP (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$DeltaP (type: integer)

$_PSL (type: boolean)

83

ActiveCoolingDiagnostic

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$ActiveCoolingStateLength (type: integer)

$ActiveCoolingState (type: string)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_TMP (type: integer)

84

ActiveCoolingOperational

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$ActiveCoolingStateLength (type: integer)

$ActiveCoolingState (type: string)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_TMP (type: integer)

85

CriticalTripPointExceededDiagnostic

-

ERROR

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$ShutdownTime (type: string)

$_CRT (type: integer)

86

CriticalTripPointExceededSystem

-

ERROR

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$ShutdownTime (type: string)

$_CRT (type: integer)

87

S4TripPointExceededDiagnostic

-

ERROR

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$HibernateTime (type: string)

$_HOT (type: integer)

88

S4TripPointExceededSystem

-

ERROR

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$HibernateTime (type: string)

$_HOT (type: integer)

89

ThermalZoneEnumerated

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$AffinityCount (type: integer)

$_PSV (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_CRT (type: integer)

$_HOT (type: integer)

$_PSL (type: string)

90

IllegalProcessorThrottleDiagnostic

-

WARNING

$ProcessorId (type: integer)

$ThrottleMSR (type: string)

$ElapsedTime (type: integer)

$LogInterval (type: integer)

91

IllegalProcessorThrottleOperational

-

WARNING

$ProcessorId (type: integer)

$ThrottleMSR (type: string)

$ElapsedTime (type: integer)

$LogInterval (type: integer)

92

CreatePowerRequest

-

INFO

$Token (type: string)

$Type (type: integer)

$ProcessID (type: integer)

$SessionID (type: integer)

$Legacy (type: boolean)

$SystemAllowed (type: boolean)

$DisplayAllowed (type: boolean)

$AwayModeAllowed (type: boolean)

$SystemCount (type: integer)

$DisplayCount (type: integer)

$AwayModeCount (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$Caller (type: string)

$Context (type: string)

92

CreatePowerRequest

-

INFO

$Token (type: string)

$Type (type: integer)

$ProcessID (type: integer)

$SessionID (type: integer)

$Legacy (type: boolean)

$SystemAllowed (type: boolean)

$DisplayAllowed (type: boolean)

$AwayModeAllowed (type: boolean)

$SystemCount (type: integer)

$DisplayCount (type: integer)

$AwayModeCount (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$Caller (type: string)

$Context (type: string)

$ExecutionRequiredAllowed (type: boolean)

$PerformanceBoostAllowed (type: boolean)

$FullScreenVideoAllowed (type: boolean)

$ExecutionRequiredCount (type: integer)

$PerformanceBoostCount (type: integer)

$FullScreenVideoCount (type: integer)

93

ChangePowerRequest

-

INFO

$Token (type: string)

$SystemCount (type: integer)

$DisplayCount (type: integer)

$AwayModeCount (type: integer)

93

ChangePowerRequest

-

INFO

$Token (type: string)

$SystemCount (type: integer)

$DisplayCount (type: integer)

$AwayModeCount (type: integer)

$ExecutionRequiredCount (type: integer)

$PerformanceBoostCount (type: integer)

$FullScreenVideoCount (type: integer)

94

ClosePowerRequest

-

INFO

$Token (type: string)

95

SystemTimeResolutionUpdate

-

INFO

$NewResolution (type: integer)

96

SystemTimeResolutionRundown

-

INFO

$CurrentPeriod (type: integer)

$MinimumPeriod (type: integer)

$MaximumPeriod (type: integer)

$KernelRequestCount (type: integer)

$KernelRequestedPeriod (type: integer)

96

SystemTimeResolutionRundown

-

INFO

$CurrentPeriod (type: integer)

$MinimumPeriod (type: integer)

$MaximumPeriod (type: integer)

$KernelRequestCount (type: integer)

$KernelRequestedPeriod (type: integer)

$InternalSetPeriod (type: integer)

97

SystemTimeResolutionRequestRundown

-

INFO

$RequestedPeriod (type: integer)

$Pid (type: integer)

$AppNameLength (type: integer)

$AppName (type: string)

98

SystemTimeResolutionKernelChange

-

INFO

$RequestedResolution (type: integer)

98

SystemTimeResolutionKernelChange

-

INFO

$RequestedResolution (type: integer)

$Tag (type: integer)

99

PowerRequestRundown

-

INFO

$Token (type: string)

$Type (type: integer)

$ProcessID (type: integer)

$SessionID (type: integer)

$Legacy (type: boolean)

$SystemAllowed (type: boolean)

$DisplayAllowed (type: boolean)

$AwayModeAllowed (type: boolean)

$SystemCount (type: integer)

$DisplayCount (type: integer)

$AwayModeCount (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$Caller (type: string)

$Context (type: string)

99

PowerRequestRundown

-

INFO

$Token (type: string)

$Type (type: integer)

$ProcessID (type: integer)

$SessionID (type: integer)

$Legacy (type: boolean)

$SystemAllowed (type: boolean)

$DisplayAllowed (type: boolean)

$AwayModeAllowed (type: boolean)

$SystemCount (type: integer)

$DisplayCount (type: integer)

$AwayModeCount (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$Caller (type: string)

$Context (type: string)

$ExecutionRequiredAllowed (type: boolean)

$PerformanceBoostAllowed (type: boolean)

$FullScreenVideoAllowed (type: boolean)

$ExecutionRequiredCount (type: integer)

$PerformanceBoostCount (type: integer)

$FullScreenVideoCount (type: integer)

100

FlushAllPages

PhaseStart

INFO

101

FlushAllPages

PhaseStop

INFO

102

BuildNotifyList

PhaseStart

INFO

103

BuildNotifyList

PhaseStop

INFO

104

SleepDisableReasonRundown

-

INFO

$AffectedState (type: integer)

$PowerReasonCode (type: integer)

$PowerReasonLength (type: integer)

$PowerReasonInfo (type: string)

105

AcDcStateChange

-

INFO

$AcOnline (type: boolean)

105

AcDcStateChange

-

INFO

$AcOnline (type: boolean)

$RemainingCapacity (type: integer)

$FullChargeCapacity (type: integer)

106

AcDcStateRundown

-

INFO

$AcOnline (type: boolean)

107

PostSleepNotification

-

INFO

$TargetState (type: integer)

$EffectiveState (type: integer)

$WakeFromState (type: integer)

107

PostSleepNotification

-

INFO

$TargetState (type: integer)

$EffectiveState (type: integer)

$WakeFromState (type: integer)

$ProgrammedWakeTimeAc (type: string)

$ProgrammedWakeTimeDc (type: string)

$WakeRequesterTypeAc (type: integer)

$WakeRequesterTypeDc (type: integer)

108

PowerTransition

-

INFO

$CopyBytes (type: integer)

$ElapsedTime (type: integer)

$IoTime (type: integer)

$InitTime (type: integer)

$CopyTime (type: integer)

$PagesWritten (type: integer)

$PagesProcessed (type: integer)

$DumpCount (type: integer)

$FileRuns (type: integer)

$ReadTime (type: integer)

$ResumeAppTime (type: integer)

$CompressTime (type: integer)

109

ShutdownAction

-

INFO

$ShutdownActionType (type: integer)

$ShutdownEventCode (type: integer)

$ShutdownReason (type: integer)

110

SystemTimerResolutionStackRundown

-

INFO

$RequestedPeriod (type: integer)

$Pid (type: integer)

$AppNameLength (type: integer)

$AppName (type: string)

$StackSize (type: integer)

$Stack (type: string)

111

PowerSettingRundown

-

INFO

$SettingGuid (type: string)

$DataSize (type: integer)

$Data (type: string)

111

PowerSettingRundown

-

INFO

$SettingGuid (type: string)

$DataSize (type: integer)

$Data (type: string)

$Override (type: boolean)

112

PowerSettingChange

-

INFO

$SettingGuid (type: string)

$DataSize (type: integer)

$Data (type: string)

112

PowerSettingChange

-

INFO

$SettingGuid (type: string)

$DataSize (type: integer)

$Data (type: string)

$Override (type: boolean)

113

PassiveCoolingDiagnostic

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$PassiveCoolingState (type: integer)

$_PSV (type: integer)

$_TMP (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$DeltaP (type: integer)

113

PassiveCoolingDiagnostic

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$PassiveCoolingState (type: integer)

$_PSV (type: integer)

$_TMP (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$DeltaP (type: integer)

$MinimumThrottle (type: integer)

114

PassiveCoolingOperational

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$PassiveCoolingState (type: integer)

$_PSV (type: integer)

$_TMP (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$DeltaP (type: integer)

114

PassiveCoolingOperational

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$PassiveCoolingState (type: integer)

$_PSV (type: integer)

$_TMP (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$DeltaP (type: integer)

$MinimumThrottle (type: integer)

115

ActiveCoolingDiagnostic

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$ActiveCoolingState (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_TMP (type: integer)

116

ActiveCoolingOperational

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$EventTime (type: string)

$ActiveCoolingState (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_TMP (type: integer)

117

PowerTransition

-

INFO

$TotalResumeTime (type: integer)

$POSTTime (type: integer)

$ResumeBootMgrTime (type: integer)

$ResumeAppTime (type: integer)

$ResumeAppStartTime (type: integer)

$ResumeLibraryInitTime (type: integer)

$ResumeInitTime (type: integer)

$ResumeHiberFileTime (type: integer)

$ResumeRestoreImageStartTimestamp (type: integer)

$ResumeIoTime (type: integer)

$ResumeDecompressTime (type: integer)

$ResumeMapTime (type: integer)

$ResumeUnmapTime (type: integer)

$ResumeUserInOutTime (type: integer)

$ResumeAllocateTime (type: integer)

$ResumeKernelSwitchTimestamp (type: integer)

$KernelReturnFromHandlerTimestamp (type: integer)

$SleeperThreadEndTimestamp (type: integer)

$TimeStampCounterAtSwitchTime (type: integer)

$KernelReturnSystemPowerStateTimestamp (type: integer)

$HiberHiberFileTime (type: integer)

$InitTime (type: integer)

$HiberSharedBufferTime (type: integer)

$TotalHibernateTime (type: integer)

$KernelResumeHiberFileTime (type: integer)

$KernelResumeInitTime (type: integer)

$KernelResumeSharedBufferTime (type: integer)

$DeviceResumeTime (type: integer)

$KernelAnimationTime (type: integer)

$KernelPagesProcessed (type: integer)

$KernelPagesWritten (type: integer)

$BootPagesProcessed (type: integer)

$BootPagesWritten (type: integer)

$HiberWriteRate (type: integer)

$HiberCompressRate (type: integer)

$ResumeReadRate (type: integer)

$ResumeDecompressRate (type: integer)

$FileRuns (type: integer)

$NoMultiStageResumeReason (type: integer)

$MaxHuffRatio (type: integer)

117

PowerTransition

-

INFO

$TotalResumeTime (type: integer)

$POSTTime (type: integer)

$ResumeBootMgrTime (type: integer)

$ResumeAppTime (type: integer)

$ResumeAppStartTime (type: integer)

$ResumeLibraryInitTime (type: integer)

$ResumeInitTime (type: integer)

$ResumeHiberFileTime (type: integer)

$ResumeRestoreImageStartTimestamp (type: integer)

$ResumeIoTime (type: integer)

$ResumeDecompressTime (type: integer)

$ResumeMapTime (type: integer)

$ResumeUnmapTime (type: integer)

$ResumeUserInOutTime (type: integer)

$ResumeAllocateTime (type: integer)

$ResumeKernelSwitchTimestamp (type: integer)

$KernelReturnFromHandlerTimestamp (type: integer)

$SleeperThreadEndTimestamp (type: integer)

$TimeStampCounterAtSwitchTime (type: integer)

$KernelReturnSystemPowerStateTimestamp (type: integer)

$HiberHiberFileTime (type: integer)

$InitTime (type: integer)

$HiberSharedBufferTime (type: integer)

$TotalHibernateTime (type: integer)

$KernelResumeHiberFileTime (type: integer)

$KernelResumeInitTime (type: integer)

$KernelResumeSharedBufferTime (type: integer)

$DeviceResumeTime (type: integer)

$KernelAnimationTime (type: integer)

$KernelPagesProcessed (type: integer)

$KernelPagesWritten (type: integer)

$BootPagesProcessed (type: integer)

$BootPagesWritten (type: integer)

$HiberWriteRate (type: integer)

$HiberCompressRate (type: integer)

$ResumeReadRate (type: integer)

$ResumeDecompressRate (type: integer)

$FileRuns (type: integer)

$NoMultiStageResumeReason (type: integer)

$MaxHuffRatio (type: integer)

$SecurePagesProcessed (type: integer)

$HiberChecksumTime (type: integer)

$HiberChecksumIoTime (type: integer)

$ResumeChecksumTime (type: integer)

$ResumeChecksumIoTime (type: integer)

$KernelChecksumTime (type: integer)

$KernelChecksumIoTime (type: integer)

118

IdleResiliencyStart

-

INFO

$RequestedResolution (type: integer)

$Flags (type: integer)

$Ticks (type: integer)

119

IdleResiliencyEnd

-

INFO

$RequestedResolution (type: integer)

$Flags (type: integer)

$Ticks (type: integer)

120

PowerTransition

-

INFO

$HiberfileSizeKB (type: integer)

$TotalHibernateTime (type: integer)

$HiberHiberFileTime (type: integer)

121

PowerTransition

-

INFO

$DriverWakeTime (type: integer)

$TotalResumeTime (type: integer)

$BiosInitTime (type: integer)

121

PowerTransition

-

INFO

$DriverWakeTime (type: integer)

$TotalResumeTime (type: integer)

$BiosInitTime (type: integer)

$ResumeAppsTime (type: integer)

$ResumeServicesTime (type: integer)

122

PowerTransition

-

INFO

$TotalResumeTime (type: integer)

$PhasePagesWrittenMB (type: integer)

$ResumeAppAndKernelResumeHiberFileTime (type: integer)

$POSTAndDeviceResumeTime (type: integer)

$RatesAndResumeAppsServicesTime (type: integer)

$PhasePagesProcessedMB (type: integer)

123

PowerTransition

-

INFO

$HiberfileSize (type: integer)

$TotalHybridShutdownTime (type: integer)

$HiberfileCreateTime (type: integer)

$SystemShutdownTime (type: integer)

124

PowerTransition

-

INFO

$TotalResumeTime (type: integer)

$PhasePagesWrittenMB (type: integer)

$ResumeAppAndKernelResumeHiberFileTime (type: integer)

$POSTAndDeviceResumeTime (type: integer)

$RatesAndResumeAppsServicesTime (type: integer)

$PhasePagesProcessedMB (type: integer)

125

ThermalZoneEnumerated

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$_PSV (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_CRT (type: integer)

$_HOT (type: integer)

125

ThermalZoneEnumerated

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$_PSV (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_CRT (type: integer)

$_HOT (type: integer)

$MinimumThrottle (type: integer)

125

ThermalZoneEnumerated

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$_PSV (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_CRT (type: integer)

$_HOT (type: integer)

$MinimumThrottle (type: integer)

$_CR3 (type: integer)

$OverThrottleThreshold (type: integer)

125

ThermalZoneEnumerated

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$_PSV (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_CRT (type: integer)

$_HOT (type: integer)

$MinimumThrottle (type: integer)

$_CR3 (type: integer)

$OverThrottleThreshold (type: integer)

$DescriptionLength (type: integer)

$Description (type: string)

125

ThermalZoneEnumerated

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$_PSV (type: integer)

$_TC1 (type: integer)

$_TC2 (type: integer)

$_TSP (type: integer)

$_AC0 (type: integer)

$_AC1 (type: integer)

$_AC2 (type: integer)

$_AC3 (type: integer)

$_AC4 (type: integer)

$_AC5 (type: integer)

$_AC6 (type: integer)

$_AC7 (type: integer)

$_AC8 (type: integer)

$_AC9 (type: integer)

$_CRT (type: integer)

$_HOT (type: integer)

$MinimumThrottle (type: integer)

$_CR3 (type: integer)

$OverThrottleThreshold (type: integer)

$DescriptionLength (type: integer)

$Description (type: string)

$_TZP (type: integer)

126

task_0

-

INFO

$Level (type: integer)

$MinorFunction (type: integer)

127

task_0

-

INFO

$Level (type: integer)

$MinorFunction (type: integer)

128

task_0

-

INFO

$Level (type: integer)

$MinorFunction (type: integer)

129

task_0

-

INFO

$Level (type: integer)

$MinorFunction (type: integer)

130

PowerTransition

-

INFO

$SuspendStart (type: integer)

$SuspendEnd (type: integer)

131

PowerTransition

-

INFO

$ResumeCount (type: integer)

$FullResume (type: integer)

$AverageResume (type: integer)

132

FirmwarePlatformRoleRundown

-

INFO

$PlatformRole (type: integer)

133

ResumeApps

PhaseStop

INFO

134

ResumeServices

PhaseStop

INFO

135

task_0

-

INFO

$DisplayState (type: integer)

136

DeviceRundown

-

INFO

$DeviceNode (type: string)

$PowerState (type: integer)

$InstancePathLength (type: integer)

$InstancePath (type: string)

$FriendlyNameLength (type: integer)

$FriendlyName (type: string)

137

task_0

-

ERROR

$SleepState (type: integer)

138

ThermalPerfTrack

-

INFO

$Throttle (type: integer)

$Temperature (type: integer)

$ZoneLength (type: integer)

$Zone (type: string)

139

ThermalDurationPerfTrack

-

INFO

$ThrottleDuration (type: integer)

$ZoneLength (type: integer)

$Zone (type: string)

140

CsConsumptionPerfTrack

-

INFO

$EnergyDrain (type: integer)

$Duration (type: integer)

$DripsTransitions (type: integer)

$Flags (type: integer)

141

CsFanPerfTrack

-

INFO

$FanDuration (type: integer)

$ActivationDelay (type: integer)

142

AbnormalReset

-

CRITICAL

$ResetReasonMask (type: integer)

143

CsDripsWatchdogPerfTrack

-

INFO

$ResiliencyPhaseNonActivatedNoDripsMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$ActionsTakenAndOnAc (type: integer)

144

ThermalEvent

-

INFO

$InitiatorLength (type: integer)

$Initiator (type: string)

$Type (type: integer)

$Temperature (type: integer)

$TripPointTemperature (type: integer)

145

ThermalZoneRundown

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$ActiveCoolingState (type: integer)

$ActivePoint (type: integer)

$PassiveCoolingState (type: integer)

$ThrottleLimit (type: integer)

145

ThermalZoneRundown

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$ActiveCoolingState (type: integer)

$ActivePoint (type: integer)

$PassiveCoolingState (type: integer)

$ThrottleLimit (type: integer)

$ThermalStandby (type: boolean)

$OverThrottled (type: boolean)

145

ThermalZoneRundown

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$ActiveCoolingState (type: integer)

$ActivePoint (type: integer)

$PassiveCoolingState (type: integer)

$ThrottleLimit (type: integer)

$ThermalStandby (type: boolean)

$OverThrottled (type: boolean)

$DescriptionLength (type: integer)

$Description (type: string)

146

PowerSettingCallback

win:Start

INFO

$Callback (type: string)

$SettingGuid (type: string)

$DataSize (type: integer)

$Data (type: string)

147

PowerSettingCallback

win:Stop

INFO

$Callback (type: string)

$SettingGuid (type: string)

148

EnergySaverState

-

INFO

$State (type: integer)

$Reason (type: integer)

149

SessionDisplayOff

-

INFO

$Session (type: integer)

$Console (type: boolean)

$Reason (type: integer)

150

SessionDisplayOn

-

INFO

$Session (type: integer)

$Console (type: boolean)

$Reason (type: integer)

151

CoolingExtensionAdd

-

INFO

$PassiveSupported (type: boolean)

$ActiveSupported (type: boolean)

$Throttle (type: integer)

$ActiveEngaged (type: boolean)

$Token (type: string)

$DeviceIdLength (type: integer)

$DeviceId (type: string)

152

CoolingExtensionRundown

-

INFO

$PassiveSupported (type: boolean)

$ActiveSupported (type: boolean)

$Throttle (type: integer)

$ActiveEngaged (type: boolean)

$Token (type: string)

$DeviceIdLength (type: integer)

$DeviceId (type: string)

153

CoolingExtensionRemove

-

INFO

$PassiveSupported (type: boolean)

$ActiveSupported (type: boolean)

$Throttle (type: integer)

$ActiveEngaged (type: boolean)

$Token (type: string)

$DeviceIdLength (type: integer)

$DeviceId (type: string)

154

CoolingExtensionPassiveUpdate

-

INFO

$Throttle (type: integer)

$Token (type: string)

155

CoolingExtensionActiveUpdate

-

INFO

$ActiveEngaged (type: boolean)

$Token (type: string)

156

ThermalRequestAdd

-

INFO

$Throttle (type: integer)

$ActiveEngaged (type: boolean)

$Token (type: string)

$DeviceIdLength (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$PolicyLength (type: integer)

$DeviceId (type: string)

$Caller (type: string)

$Context (type: string)

$Policy (type: string)

157

ThermalRequestRundown

-

INFO

$Throttle (type: integer)

$ActiveEngaged (type: boolean)

$Token (type: string)

$DeviceIdLength (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$PolicyLength (type: integer)

$DeviceId (type: string)

$Caller (type: string)

$Context (type: string)

$Policy (type: string)

158

ThermalRequestRemove

-

INFO

$Throttle (type: integer)

$ActiveEngaged (type: boolean)

$Token (type: string)

$DeviceIdLength (type: integer)

$CallerLength (type: integer)

$ContextLength (type: integer)

$PolicyLength (type: integer)

$DeviceId (type: string)

$Caller (type: string)

$Context (type: string)

$Policy (type: string)

159

ThermalRequestPassiveUpdate

-

INFO

$Throttle (type: integer)

$Token (type: string)

160

ThermalRequestActiveUpdate

-

INFO

$ActiveEngaged (type: boolean)

$Token (type: string)

161

CsDripsWatchdog

-

INFO

$ResiliencyPhaseNonActivatedNoDripsMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$OnAc (type: boolean)

$EnergyDrainMw (type: integer)

$DeviceConstraint (type: boolean)

$ActionsTaken (type: integer)

$DeviceServiceNameLength (type: integer)

$DeviceServiceName (type: string)

$ChildServiceNameLength (type: integer)

$ChildServiceName (type: string)

161

CsDripsWatchdog

-

INFO

$ResiliencyPhaseNonActivatedNoDripsMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$OnAc (type: boolean)

$EnergyDrainMw (type: integer)

$DeviceConstraint (type: boolean)

$ActionsTaken (type: integer)

$DeviceServiceNameLength (type: integer)

$DeviceServiceName (type: string)

$ChildServiceNameLength (type: integer)

$ChildServiceName (type: string)

$PepPreVeto (type: integer)

161

CsDripsWatchdog

-

INFO

$ResiliencyPhaseNonActivatedNoDripsMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$OnAc (type: boolean)

$EnergyDrainMw (type: integer)

$DeviceConstraint (type: boolean)

$ActionsTaken (type: integer)

$DeviceServiceNameLength (type: integer)

$DeviceServiceName (type: string)

$ChildServiceNameLength (type: integer)

$ChildServiceName (type: string)

$PepPreVeto (type: integer)

$InvocationCount (type: integer)

161

CsDripsWatchdog

-

INFO

$ResiliencyPhaseNonActivatedNoDripsMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$OnAc (type: boolean)

$EnergyDrainMw (type: integer)

$DeviceConstraint (type: boolean)

$ActionsTaken (type: integer)

$DeviceServiceNameLength (type: integer)

$DeviceServiceName (type: string)

$ChildServiceNameLength (type: integer)

$ChildServiceName (type: string)

$PepPreVeto (type: integer)

$InvocationCount (type: integer)

162

ThermalZoneThermalStandbyUpdate

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$Engaged (type: boolean)

163

ThermalZoneOverthrottledUpdate

-

INFO

$ThermalZoneDeviceInstanceLength (type: integer)

$ThermalZoneDeviceInstance (type: string)

$Engaged (type: boolean)

164

ThermalStandbyNotification

-

INFO

165

SystemIdle

-

INFO

$IdleInformationUpdated (type: boolean)

$TimeoutSource (type: integer)

$Action (type: integer)

$MinState (type: integer)

$Timeout (type: integer)

$Flags (type: integer)

165

SystemIdle

-

INFO

$IdleInformationUpdated (type: boolean)

$TimeoutSource (type: integer)

$Action (type: integer)

$MinState (type: integer)

$Timeout (type: integer)

$Flags (type: integer)

$Reason (type: integer)

166

SystemIdle

-

INFO

$AccumulatedIdleTime (type: integer)

$SystemIdle (type: boolean)

$Flags (type: integer)

$Action (type: integer)

$MinState (type: integer)

$DozeS4Timeout (type: integer)

166

SystemIdle

-

INFO

$AccumulatedIdleTime (type: integer)

$SystemIdle (type: boolean)

$Flags (type: integer)

$Action (type: integer)

$MinState (type: integer)

$DozeS4Timeout (type: integer)

$PredictedUserReturnTime (type: string)

167

SystemIdle

-

INFO

$Reason (type: integer)

$S0LowPowerDozeTimerCancelled (type: boolean)

168

SystemIdle

-

INFO

$CancelledDueToUserInput (type: boolean)

169

SystemIdle

win:Start

INFO

$Source (type: integer)

$Time (type: string)

170

SystemIdle

win:Stop

INFO

$Reason (type: integer)

171

CsDeepSleepWatchdog

-

INFO

$ResiliencyPhaseNonActivatedNoDeepSleepMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$OnAc (type: boolean)

$ActionsTaken (type: integer)

$PowerSettingPending (type: boolean)

171

CsDeepSleepWatchdog

-

INFO

$ResiliencyPhaseNonActivatedNoDeepSleepMs (type: integer)

$NonActivatedCpuTimeMs (type: integer)

$DurationThisPeriodMs (type: integer)

$OnAc (type: boolean)

$ActionsTaken (type: integer)

$PowerSettingPending (type: boolean)

172

StandbyConnectivityUpdate

-

INFO

$State (type: integer)

$Reason (type: integer)

173

FlushSleepStudyLogger

win:Start

INFO

174

FlushSleepStudyLogger

win:Stop

INFO

175

StandbyConnectivityRundown

-

INFO

$State (type: integer)

$Reason (type: integer)

176

CsComplianceRundown

-

INFO

$Type (type: integer)

$State (type: integer)

177

CsComplianceUpdate

-

INFO

$Type (type: integer)

$State (type: integer)

178

BackgroundActivityPolicyUpdate

-

INFO

$PreviousPolicy (type: integer)

$NewPolicy (type: integer)

179

ForceIdleStateChange

-

INFO

$PrevState (type: integer)

$NewState (type: integer)

180

ForceIdleReset

-

INFO

$Reason (type: integer)

181

DeepSleepSetConstraint

-

INFO

$Constraint (type: integer)

182

DeepSleepClearConstraint

-

INFO

$Constraint (type: integer)

183

DeepSleepConstraintRundown

-

INFO

$ConstraintCount (type: integer)

$Constraints (type: string)

184

IRTimerExpiries

-

INFO

$ExpiryCount (type: integer)

$RelativeId (type: integer)

$ComponentName (type: string)

185

RtcWakeInfo

-

INFO

$WokeSystem (type: boolean)

$RejectReason (type: integer)

$Uncertain (type: boolean)

$Spurious (type: boolean)

$FixedWakeSourceMask (type: integer)

$AcAlarmSignaled (type: boolean)

$DcAlarmSignaled (type: boolean)

$RtcSignaled (type: boolean)

$AcProgrammedTime (type: string)

$DcProgrammedTime (type: string)

$UsingAcTime (type: boolean)

$WakeTime (type: string)

$AdjustedWakeTime (type: string)

$FullWake (type: boolean)

186

Irp

Pended

INFO

$Irp (type: string)

187

NtInitiatePowerActionApiCall

-

INFO

$ApiCallerNameLength (type: integer)

$ApiCallerName (type: string)

$SystemAction (type: integer)

$LightestSystemState (type: integer)

200

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmSid (type: string)

$SqmWindowsSessionId (type: integer)

$SqmSessionFlags (type: integer)

201

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

202

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmDWORDDatapointValue (type: integer)

203

task_0

win:Stop

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmDWORDDatapointValue (type: integer)

204

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmDWORDDatapointValue (type: integer)

205

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmDWORDDatapointValue (type: integer)

206

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmDWORDDatapointValue (type: integer)

207

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmStringDatapointValue (type: string)

208

task_0

-

INFO

$SqmType (type: integer)

$SqmSessionGuid (type: string)

$SqmID (type: integer)

$SqmStreamRowLength (type: integer)

$SqmStreamRow (type: integer)

300

PluginRegistration

-

INFO

$Plugin (type: string)

$Attributes (type: integer)

301

PluginRegistrationRundown

-

INFO

$Plugin (type: string)

$Attributes (type: integer)

302

DevicePreparation

-

INFO

$Token (type: string)

$Plugin (type: string)

$IdLength (type: integer)

$Id (type: string)

$Prepared (type: boolean)

303

DeviceRegistration

-

INFO

$Token (type: string)

$Plugin (type: string)

$PowerState (type: integer)

$Status (type: integer)

$IdLength (type: integer)

$Id (type: string)

$ComponentCount (type: integer)

303

DeviceRegistration

-

INFO

$Token (type: string)

$Plugin (type: string)

$PowerState (type: integer)

$Status (type: integer)

$IdLength (type: integer)

$Id (type: string)

$ComponentCount (type: integer)

$VetoMasks (type: integer)

304

DeviceRegistrationRundown

-

INFO

$Token (type: string)

$Plugin (type: string)

$PowerState (type: integer)

$Status (type: integer)

$IdLength (type: integer)

$Id (type: string)

$ComponentCount (type: integer)

304

DeviceRegistrationRundown

-

INFO

$Token (type: string)

$Plugin (type: string)

$PowerState (type: integer)

$Status (type: integer)

$IdLength (type: integer)

$Id (type: string)

$ComponentCount (type: integer)

$VetoMasks (type: integer)

305

DeviceUnregistration

-

INFO

$Token (type: string)

306

StartDevicePowerManagement

-

INFO

$Token (type: string)

307

DevicePowerRequirementToDevice

-

INFO

$Token (type: string)

$PowerRequired (type: boolean)

308

DevicePowerState

-

INFO

$Token (type: string)

$PowerState (type: integer)

309

DevicePowered

-

INFO

$Token (type: string)

310

ComponentRegistration

-

INFO

$Token (type: string)

$Component (type: integer)

$Active (type: boolean)

$IdleState (type: integer)

$IdleStateCount (type: integer)

$IdleStates (type: integer)

310

ComponentRegistration

-

INFO

$Token (type: string)

$Component (type: integer)

$Active (type: boolean)

$IdleState (type: integer)

$IdleStateCount (type: integer)

$IdleStates (type: integer)

311

ComponentRegistrationRundown

-

INFO

$Token (type: string)

$Component (type: integer)

$Active (type: boolean)

$IdleState (type: integer)

$IdleStateCount (type: integer)

$IdleStates (type: integer)

311

ComponentRegistrationRundown

-

INFO

$Token (type: string)

$Component (type: integer)

$Active (type: boolean)

$IdleState (type: integer)

$IdleStateCount (type: integer)

$IdleStates (type: integer)

312

ComponentCondition

-

INFO

$Token (type: string)

$Component (type: integer)

$Active (type: boolean)

313

ComponentIdleState

-

INFO

$Token (type: string)

$Component (type: integer)

$IdleState (type: integer)

314

ComponentLatency

-

INFO

$Token (type: string)

$Component (type: integer)

$Latency (type: integer)

315

ComponentResidency

-

INFO

$Token (type: string)

$Component (type: integer)

$Residency (type: integer)

316

ComponentWake

-

INFO

$Token (type: string)

$Component (type: integer)

$ArmedForWake (type: boolean)

317

DevicePowerRequirementFromPep

-

INFO

$Token (type: string)

$PowerRequired (type: boolean)

318

DeviceIdleConstraints

-

INFO

$Token (type: string)

$StateCount (type: integer)

$MinimumDStates (type: integer)

319

ComponentIdleConstraints

-

INFO

$Token (type: string)

$Component (type: integer)

$StateCount (type: integer)

$MinimumFStates (type: integer)

320

DeviceVerboseRundown

-

INFO

$DeviceNode (type: string)

$DeviceIdLength (type: integer)

$DeviceId (type: string)

$InstancePathLength (type: integer)

$InstancePath (type: string)

$ServiceNameLength (type: integer)

$ServiceName (type: string)

$PlatformStateDependents (type: integer)

320

DeviceVerboseRundown

-

INFO

$DeviceNode (type: string)

$DeviceIdLength (type: integer)

$DeviceId (type: string)

$InstancePathLength (type: integer)

$InstancePath (type: string)

$ServiceNameLength (type: integer)

$ServiceName (type: string)

$PlatformStateDependents (type: integer)

$Pdo (type: string)

$ParentDeviceNode (type: string)

320

DeviceVerboseRundown

-

INFO

$DeviceNode (type: string)

$DeviceIdLength (type: integer)

$DeviceId (type: string)

$InstancePathLength (type: integer)

$InstancePath (type: string)

$ServiceNameLength (type: integer)

$ServiceName (type: string)

$PlatformStateDependents (type: integer)

$Pdo (type: string)

$ParentDeviceNode (type: string)

$Flags (type: integer)

321

PerformanceStateRegistration

-

INFO

$Token (type: string)

$Component (type: integer)

$SetCount (type: integer)

322

PerformanceStateRegistrationRundown

-

INFO

$Token (type: string)

$Component (type: integer)

$SetCount (type: integer)

323

PerformanceStateSetRegistration

-

INFO

$Token (type: string)

$Component (type: integer)

$Set (type: integer)

$NameLength (type: integer)

$Name (type: string)

$Type (type: integer)

$Unit (type: integer)

$Minimum (type: integer)

$Maximum (type: integer)

$StateCount (type: integer)

$StateValues (type: integer)

$CurrentState (type: integer)

324

PerformanceStateSetRegistrationRundown

-

INFO

$Token (type: string)

$Component (type: integer)

$Set (type: integer)

$NameLength (type: integer)

$Name (type: string)

$Type (type: integer)

$Unit (type: integer)

$Minimum (type: integer)

$Maximum (type: integer)

$StateCount (type: integer)

$StateValues (type: integer)

$CurrentState (type: integer)

325

ComponentPerformanceState

-

INFO

$Token (type: string)

$Component (type: integer)

$PerformanceStateSetCount (type: integer)

$PerformanceStateSets (type: integer)

326

ComponentPerformanceState

-

INFO

$Token (type: string)

$Component (type: integer)

$Progress (type: integer)

327

ComponentPerformanceState

-

INFO

$Token (type: string)

$Component (type: integer)

$Succeeded (type: boolean)

328

ComponentPerformanceState

-

INFO

$Token (type: string)

$Component (type: integer)

$DeviceTransition (type: boolean)

$PowerState (type: integer)

$PerformanceStateSetCount (type: integer)

$PerformanceStateSets (type: integer)

329

DebuggerTransitionRequirements

-

INFO

$Token (type: string)

$StateCount (type: integer)

$TransitionRequired (type: integer)

330

DefaultPepWorker

win:Start

INFO

$StartDevice (type: string)

331

DefaultPepWorker

win:Stop

INFO

$EndDevice (type: string)

$WorkType (type: integer)

$Phase (type: integer)

$NumberExtraDevices (type: integer)

332

DefaultPepWorkerDeviceRecovered

-

CRITICAL

$EndDevice (type: string)

$WorkType (type: integer)

$Phase (type: integer)

$NumberExtraDevices (type: integer)

333

DefaultPepWorkerDeviceOrphaned

-

CRITICAL

$EndDevice (type: string)

$WorkType (type: integer)

$Phase (type: integer)

$NumberExtraDevices (type: integer)

400

SessionCreated

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

401

SessionClosed

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

402

SessionConnected

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

403

SessionDisconnected

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

404

ActiveInput

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

405

PassiveInput

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

406

SessionLocked

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

407

SessionUnlocked

-

INFO

$SessionId (type: integer)

$Console (type: boolean)

408

SensorInput

-

INFO

$UserPresence (type: integer)

409

SensorInvalid

-

INFO

$Code (type: integer)

410

SensorSmoothing

-

INFO

$Engaged (type: integer)

411

SensorWatchdog

-

INFO

$Engaged (type: integer)

412

DisplaySessionStatus

-

INFO

$SessionId (type: integer)

$State (type: integer)

413

UserSessionStatus

-

INFO

$SessionId (type: integer)

$State (type: integer)

414

UserGlobalStatus

-

INFO

$SessionId (type: integer)

$State (type: integer)

414

UserGlobalStatus

-

INFO

$SessionId (type: integer)

$State (type: integer)

$TransitionCount (type: integer)

415

SensorInputChanged

-

INFO

$Old (type: integer)

$New (type: integer)

416

InputState

-

INFO

$Value (type: integer)

$Zeroed (type: integer)

$Computed (type: integer)

417

DisplayState

-

INFO

$Value (type: integer)

$Zeroed (type: integer)

$Computed (type: integer)

418

PolicyChange

-

INFO

$SensorDisplayTimeout (type: integer)

$DisplayTimeout (type: integer)

$SensorInputTimeout (type: integer)

$InputTimeout (type: integer)

$SessionLockedTimeout (type: integer)

$SensorEnabled (type: integer)

500

IoCoalescingOn

-

INFO

$SpindownTimeout (type: integer)

$TimerInterval (type: integer)

$FlushInterval (type: integer)

$Flags (type: integer)

501

IoCoalescingOff

-

INFO

502

IoCoalescingFlush

-

INFO

503

IoCoalescingDiskIdle

-

INFO

$DiskDeviceObject (type: string)

504

SystemLatencyUpdate

-

INFO

$SystemLatency (type: integer)

505

SystemLatencyRundown

-

INFO

$SystemLatency (type: integer)

506

CsEnterReason

-

INFO

$Reason (type: integer)

506

CsEnterReason

-

INFO

$Reason (type: integer)

$LidOpenState (type: boolean)

$ExternalMonitorConnectedState (type: boolean)

$ScenarioInstanceId (type: integer)

506

CsEnterReason

-

INFO

$Reason (type: integer)

$LidOpenState (type: boolean)

$ExternalMonitorConnectedState (type: boolean)

$ScenarioInstanceId (type: integer)

$BatteryRemainingCapacityOnEnter (type: integer)

$BatteryFullChargeCapacityOnEnter (type: integer)

506

CsEnterReason

-

INFO

$Reason (type: integer)

$LidOpenState (type: boolean)

$ExternalMonitorConnectedState (type: boolean)

$ScenarioInstanceId (type: integer)

$BatteryRemainingCapacityOnEnter (type: integer)

$BatteryFullChargeCapacityOnEnter (type: integer)

$ScenarioInstanceIdV2 (type: integer)

$BootId (type: integer)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$ExitLatencyInUs (type: integer)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$ExitLatencyInUs (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$ExitLatencyInUs (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$ExitLatencyInUs (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

$LidOpenState (type: boolean)

$ExternalMonitorConnectedState (type: boolean)

$ScenarioInstanceId (type: integer)

$IsCsSessionInProgressOnExit (type: boolean)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$ExitLatencyInUs (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

$LidOpenState (type: boolean)

$ExternalMonitorConnectedState (type: boolean)

$ScenarioInstanceId (type: integer)

$IsCsSessionInProgressOnExit (type: boolean)

$BatteryRemainingCapacityOnExit (type: integer)

$BatteryFullChargeCapacityOnExit (type: integer)

507

CsExitReason

-

INFO

$EnergyDrain (type: integer)

$ActiveResidencyInUs (type: integer)

$NonDripsTimeActivatedInUs (type: integer)

$FirstDripsEntryInUs (type: integer)

$DripsResidencyInUs (type: integer)

$DurationInUs (type: integer)

$DripsTransitions (type: integer)

$FullChargeCapacityRatio (type: integer)

$AudioPlaying (type: boolean)

$Reason (type: integer)

$AudioPlaybackInUs (type: integer)

$NonActivatedCpuInUs (type: integer)

$PowerStateAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$ExitLatencyInUs (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

$LidOpenState (type: boolean)

$ExternalMonitorConnectedState (type: boolean)

$ScenarioInstanceId (type: integer)

$IsCsSessionInProgressOnExit (type: boolean)

$BatteryRemainingCapacityOnExit (type: integer)

$BatteryFullChargeCapacityOnExit (type: integer)

$ScenarioInstanceIdV2 (type: integer)

$BootId (type: integer)

$InputSuppressionActionCount (type: integer)

$NonResiliencyTimeInUs (type: integer)

$ResiliencyDripsTimeInUs (type: integer)

$ResiliencyHwDripsTimeInUs (type: integer)

508

DynamicTickDisabled

-

INFO

$Reason (type: integer)

509

DynamicTickStatusRundown

-

INFO

$Flags (type: integer)

510

SpmStatusUpdate

-

INFO

$SpmStatus (type: integer)

511

SpmStatusRundown

-

INFO

$SpmStatus (type: integer)

512

SpmPolicyAliasRundown

-

INFO

$PolicyGuid (type: string)

$PolicyAliasLength (type: integer)

$PolicyAlias (type: string)

513

SpmScenarioPolicyRundown

-

INFO

$ScenarioGuid (type: string)

$ScenarioNameLength (type: integer)

$ScenarioName (type: string)

$Flags (type: integer)

$DefaultSettingsScenarioGuid (type: string)

$PolicyCount (type: integer)

$PolicySettings (type: integer)

514

ComponentAccounting

-

INFO

$ScenarioInstanceId (type: integer)

$DeviceNode (type: string)

$Component (type: integer)

$ActiveTime (type: integer)

515

SpmScenarioStart

-

INFO

$ScenarioGuid (type: string)

$ScenarioInstanceId (type: integer)

515

SpmScenarioStart

-

INFO

$ScenarioGuid (type: string)

$ScenarioInstanceId (type: integer)

$CsEnterReason (type: integer)

515

SpmScenarioStart

-

INFO

$ScenarioGuid (type: string)

$ScenarioInstanceId (type: integer)

$CsEnterReason (type: integer)

$BatteryRemainingCapacityOnEnter (type: integer)

$BatteryFullChargeCapacityOnEnter (type: integer)

515

SpmScenarioStart

-

INFO

$ScenarioGuid (type: string)

$ScenarioInstanceId (type: integer)

$CsEnterReason (type: integer)

$BatteryRemainingCapacityOnEnter (type: integer)

$BatteryFullChargeCapacityOnEnter (type: integer)

$ScenarioInstanceIdV2 (type: integer)

$BootId (type: integer)

$CurrentSystemTime (type: string)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$EnergySaverPolicy (type: boolean)

$VideoTimeoutInSec (type: integer)

$LockConsoleTimeoutInSec (type: integer)

$StandbyTimeoutInSec (type: integer)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$EnergySaverPolicy (type: boolean)

$VideoTimeoutInSec (type: integer)

$LockConsoleTimeoutInSec (type: integer)

$StandbyTimeoutInSec (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$EnergySaverPolicy (type: boolean)

$VideoTimeoutInSec (type: integer)

$LockConsoleTimeoutInSec (type: integer)

$StandbyTimeoutInSec (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

$EnergyDrainV2Flags (type: integer)

$EnergyDrainV2 (type: integer)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$EnergySaverPolicy (type: boolean)

$VideoTimeoutInSec (type: integer)

$LockConsoleTimeoutInSec (type: integer)

$StandbyTimeoutInSec (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

$EnergyDrainV2Flags (type: integer)

$EnergyDrainV2 (type: integer)

$DirectedDripsTransitionCount (type: integer)

$IsHibernateEnabled (type: boolean)

$HibernateTimeoutInSec (type: integer)

$HibernateBudgetPercentage (type: integer)

516

SpmScenarioStop

-

INFO

$EnergyDrain (type: integer)

$DripsResidencyInUs (type: integer)

$OnAc (type: boolean)

$HwDripsResidencyInUs (type: integer)

$PreVetoCount (type: integer)

$VetoCount (type: integer)

$DurationInUs (type: integer)

$FullChargeCapacity (type: integer)

$NonActivatedCpuInUs (type: integer)

$IRTruncatePercentage (type: integer)

$DesignCapacity (type: integer)

$AudioDurationInUs (type: integer)

$Reason (type: integer)

$DisconnectedStandby (type: boolean)

$AoAcCompliantNic (type: boolean)

$NonAttributedCpuInUs (type: integer)

$EnergySaverPolicy (type: boolean)

$VideoTimeoutInSec (type: integer)

$LockConsoleTimeoutInSec (type: integer)

$StandbyTimeoutInSec (type: integer)

$ModernSleepEnabledActionsBitmask (type: integer)

$ModernSleepAppliedActionsBitmask (type: integer)

$EnergyDrainV2Flags (type: integer)

$EnergyDrainV2 (type: integer)

$DirectedDripsTransitionCount (type: integer)

$IsHibernateEnabled (type: boolean)

$HibernateTimeoutInSec (type: integer)

$HibernateBudgetPercentage (type: integer)

$IsLockConsoleTimeoutActive (type: boolean)

517

DeviceAccounting

-

INFO

$ScenarioInstanceId (type: integer)

$DeviceNode (type: string)

$ActiveTime (type: integer)

518

IoShutdownFileSystems

win:Start

INFO

519

IoShutdownFileSystems

win:Stop

INFO

520

BrightnessEngineSwap

-

INFO

521

BatteryCountChange

-

INFO

$ValidBatteryCount (type: integer)

$ErrorBatteryCount (type: integer)

$AbandonedBatteryCount (type: integer)

522

CsDripsDivergence

-

INFO

$HwDripsTotalTimeValid (type: boolean)

$DripsTotalTimeThisPeriodUs (type: integer)

$HwDripsTotalTimeThisPeriodUs (type: integer)

$PopDripsSwHwDivergenceThreshold (type: integer)

523

Irp

-

INFO

$Irp (type: string)

$Status (type: integer)

$FailedDriver (type: string)

$ElapsedTime (type: integer)

524

BatteryTriggerMet

-

INFO

$Index (type: integer)

$ActiveBatteryCount (type: integer)

$RemainingPercentage (type: integer)

$IsAcOnline (type: integer)

$BatteryActionInternalFlags (type: string)

$IsPowerActionCallIgnored (type: integer)

$IsPowerPolicyEnabled (type: integer)

$PowerPolicyAction (type: integer)

$PowerPolicyBatteryLevel (type: integer)

$PowerPolicyEventCode (type: integer)

$PowerPolicyMinState (type: integer)

525

NetRefreshTimerArmed

-

INFO

$DurationInUs (type: integer)

526

NetRefreshTimerDisarmed

-

INFO

527

PowerStateEventRundown

-

INFO

$Event (type: integer)

$Class (type: integer)

$Count (type: integer)

528

PowerStateEvent

-

INFO

$Event (type: integer)

$Intent (type: integer)

529

PowerAggregatorQueueOverflow

-

INFO

$Intent (type: integer)

$Class (type: integer)

$PowerEvent (type: integer)

530

PowerAggregatorRequest

-

INFO

$SessionId (type: integer)

$RequestQueueId (type: integer)

$Intent (type: integer)

$Class (type: integer)

$PowerEvent (type: integer)

$VetoReason (type: integer)

531

PowerAggregatorValidationEvent

-

INFO

$SessionId (type: integer)

$Action (type: integer)

$Result (type: integer)

532

PowerAggregatorCompletionEvent

-

INFO

$SessionId (type: integer)

$Result (type: integer)

533

PowerAggregatorSessionBegin

-

INFO

$SessionId (type: integer)

$PowerEvent (type: integer)

$Action (type: integer)

$AudioActivity (type: boolean)

$DisconnectedStandbyMode (type: integer)

$DsEnabled (type: boolean)

534

PowerAggregatorSessionEnd

-

INFO

$SessionId (type: integer)

$Result (type: integer)

535

DirectedDripsEngaged

-

INFO

$CsSessionId (type: integer)

$Engaged (type: boolean)

536

DirectedDripsWorker

-

INFO

$CsSessionId (type: integer)

$WorkFlags (type: integer)

537

DirectedDripsMarkDevice

-

INFO

$CsSessionId (type: integer)

$DeviceObject (type: string)

538

DirectedDripsNotifyAppsAndServices

-

INFO

$CsSessionId (type: integer)

$Suspended (type: boolean)

$Result (type: integer)

$DurationMs (type: integer)

539

DirectedDripsNotifyDevices

-

INFO

$CsSessionId (type: integer)

$Suspended (type: boolean)

$Result (type: integer)

$DurationMs (type: integer)

540

DirectedDripsInitialization

-

INFO

$EnableResult (type: integer)

$InitializationResult (type: integer)

541

SIdleUpdateNotificationWorker

-

INFO

$SystemIdle (type: boolean)

542

PowerAggregatorInvalidRequestIndex

-

INFO

$RequestIndex (type: integer)

$NumberOfRequests (type: integer)

$QueueSize (type: integer)

543

DripsWakeAccountingSummary

-

INFO

$CsSessionId (type: integer)

$Count (type: integer)

$IdleMinDurationInUs (type: integer)

$IdleMaxDurationInUs (type: integer)

$IdleTotalDurationInUs (type: integer)

$ReasonDescriptionLength (type: integer)

$ReasonDescription (type: string)

$GroupCount (type: integer)

$Group (type: integer)

544

DirectedDripsDisengageMaskChange

-

INFO

$OldMask (type: integer)

$NewMask (type: integer)

$SetFlags (type: integer)

$ClearedFlags (type: integer)

545

DirectedDripsDeviceVisit

-

INFO

$BroadcastTreeId (type: integer)

$IsRootDevice (type: boolean)

$DeviceNode (type: string)

$InstancePathLength (type: integer)

$InstancePath (type: string)

546

DirectedDripsProblemDevice

-

INFO

$BroadcastTreeId (type: integer)

$DeviceNode (type: string)

$Reason (type: integer)

547

DirectedPowerTransitionStart

-

INFO

$DeviceNode (type: string)

$PowerDown (type: boolean)

548

DirectedPowerTransitionEnd

-

INFO

$DeviceNode (type: string)

$PowerDown (type: boolean)

Microsoft-Windows-Kernel-PowerTrigger

1

task_0

-

INFO

$AoAc (type: boolean)

Microsoft-Windows-Kernel-Processor-Power

1

IdleStatesError

-

ERROR

$Processor (type: integer)

2

PerfStatesError

-

ERROR

$Processor (type: integer)

3

ThrottleStatesError

-

ERROR

$Processor (type: integer)

4

Summary

-

INFO

$Processor (type: integer)

$IdleStateCount (type: integer)

$PerfStateCount (type: integer)

$ThrottleStateCount (type: integer)

$IdleState (type: integer)

$PerfState (type: integer)

5

IdleStatesErrata

-

ERROR

6

PerfStatesErrata

-

ERROR

7

LongCapInfo

-

WARNING

$Processor (type: integer)

$CapDurationInSeconds (type: integer)

$PpcChanges (type: integer)

$TpcChanges (type: integer)

8

QuickCapInfo

-

WARNING

$Processor (type: integer)

$CapDurationInSeconds (type: integer)

$PpcChanges (type: integer)

$TpcChanges (type: integer)

9

DomainPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$GroupCount (type: integer)

$Group (type: integer)

9

DomainPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$GroupCount (type: integer)

$Group (type: integer)

$Performance (type: integer)

9

DomainPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$GroupCount (type: integer)

$Group (type: integer)

$Performance (type: integer)

$MinPercent (type: integer)

$MaxPercent (type: integer)

$TolerancePercent (type: integer)

9

DomainPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$GroupCount (type: integer)

$Group (type: integer)

$Performance (type: integer)

$MinPercent (type: integer)

$MaxPercent (type: integer)

$TolerancePercent (type: integer)

$Autonomous (type: boolean)

10

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

10

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

$Performance (type: integer)

10

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

$Performance (type: integer)

$TolerancePercent (type: integer)

10

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

$Performance (type: integer)

$TolerancePercent (type: integer)

$MinPercent (type: integer)

$MaxPercent (type: integer)

$EppPercent (type: integer)

$ActivityWindow (type: integer)

$Autonomous (type: boolean)

$Initiated (type: boolean)

$VirtualLittle (type: boolean)

10

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

$Performance (type: integer)

$TolerancePercent (type: integer)

$MinPercent (type: integer)

$MaxPercent (type: integer)

$EppPercent (type: integer)

$ActivityWindow (type: integer)

$Autonomous (type: boolean)

$Initiated (type: boolean)

$QosClass (type: integer)

11

PerfCheck

win:Start

-

$PpmCheckTime (type: integer)

11

PerfCheck

win:Start

-

$PpmCheckTime (type: integer)

$AdjustedCheckTime (type: integer)

$StartPhase (type: integer)

12

RecordedUtility

-

-

$PpmCheckTime (type: integer)

$IdleTime (type: integer)

$BusyTime (type: integer)

$Frequency (type: integer)

$Group (type: integer)

$Number (type: integer)

12

RecordedUtility

-

-

$PpmCheckTime (type: integer)

$IdleTime (type: integer)

$BusyTime (type: integer)

$Frequency (type: integer)

$Group (type: integer)

$Number (type: integer)

$DeliveredPerformance (type: integer)

$Utility (type: integer)

$AffinitizedUtility (type: integer)

$FrequencySensitivity (type: integer)

12

RecordedUtility

-

-

$PpmCheckTime (type: integer)

$IdleTime (type: integer)

$BusyTime (type: integer)

$Frequency (type: integer)

$Group (type: integer)

$Number (type: integer)

$DeliveredPerformance (type: integer)

$Utility (type: integer)

$AffinitizedUtility (type: integer)

$FrequencySensitivity (type: integer)

$BufferingPercent (type: integer)

$StallTime (type: integer)

13

ExpectedUtility

-

INFO

$PpmCheckTime (type: integer)

$IdleTimeInMs (type: integer)

$BusyTimeInMs (type: integer)

$ExcessBusyTimeInMs (type: integer)

$Frequency (type: integer)

$Group (type: integer)

$Number (type: integer)

14

ParkCore

-

INFO

$PpmCheckTime (type: integer)

$Group (type: integer)

$Number (type: integer)

15

UnparkCore

-

INFO

$PpmCheckTime (type: integer)

$Group (type: integer)

$Number (type: integer)

16

PerfCheck

win:Stop

-

$PpmCheckTime (type: integer)

18

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

18

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

$Performance (type: integer)

18

ProcessorPerfStateChange

-

INFO

$State (type: integer)

$Speed (type: integer)

$Group (type: integer)

$Number (type: integer)

$Performance (type: integer)

$TolerancePercent (type: integer)

19

IdleAccountingRundown

-

INFO

$StateCount (type: integer)

$TotalTransitions (type: integer)

$ResetCount (type: integer)

$Pad (type: integer)

$StartTime (type: integer)

$State (type: integer)

$Group (type: integer)

$Number (type: integer)

19

IdleAccountingRundown

-

INFO

$StateCount (type: integer)

$TotalTransitions (type: integer)

$ResetCount (type: integer)

$AbortCount (type: integer)

$StartTime (type: integer)

$State (type: integer)

$Group (type: integer)

$Number (type: integer)

$IdleTime (type: integer)

19

IdleAccountingRundown

-

INFO

$StateCount (type: integer)

$TotalTransitions (type: integer)

$ResetCount (type: integer)

$AbortCount (type: integer)

$StartTime (type: integer)

$State (type: string)

$Group (type: integer)

$Number (type: integer)

$IdleTime (type: integer)

$SelectionCount (type: integer)

$SelectionAccounting (type: string)

20

ProcessorFirmwareRundown

-

INFO

$FeaturesPresent (type: integer)

$FeaturesAccessed (type: integer)

$FeaturesValidated (type: integer)

$Group (type: integer)

$Number (type: integer)

21

CStateDomainFirmwareRundown

-

INFO

$DomainId (type: integer)

$MemberCount (type: integer)

$MembersEnumerated (type: integer)

22

PTStateDomainFirmwareRundown

-

INFO

$DomainId (type: integer)

$MemberCount (type: integer)

$MembersEnumerated (type: integer)

23

Summary

-

INFO

$Group (type: integer)

$Number (type: integer)

$IdleStateCount (type: integer)

$PerfStateCount (type: integer)

$ThrottleStateCount (type: integer)

$IdleState (type: integer)

$PerfState (type: integer)

24

IdleStatesErrata

-

ERROR

25

PerfStatesErrata

-

ERROR

26

Summary

-

INFO

$Group (type: integer)

$Number (type: integer)

$IdleStateCount (type: integer)

$PerfStateCount (type: integer)

$ThrottleStateCount (type: integer)

$IdleState (type: integer)

$PerfState (type: integer)

26

Summary

-

INFO

$Group (type: integer)

$Number (type: integer)

$IdleStateCount (type: integer)

$PerfStateCount (type: integer)

$ThrottleStateCount (type: integer)

$IdleState (type: integer)

$PerfState (type: integer)

27

ThrottleStatesErrata

-

ERROR

28

ThrottleStatesErrata

-

ERROR

29

PccSummary

-

INFO

$MajorVersion (type: integer)

$MinorVersion (type: integer)

$MinPerfPercent (type: integer)

$MinThrottlePercent (type: integer)

30

PccSummary

-

INFO

$MajorVersion (type: integer)

$MinorVersion (type: integer)

$MinPerfPercent (type: integer)

$MinThrottlePercent (type: integer)

31

PccErrata

-

ERROR

32

PccErrata

-

ERROR